Shibarium Hack
Reported loss
$4.1M
Validator Stake Manipulation by Flashloan
What happened
The Shibarium bridge was exploited on September 12, 2025 after an attacker obtained unauthorised validator signing power and submitted a malicious bridge exit. The team restricted bridge operations, rotated validator signers and secured at-risk BONE. Published dollar-loss estimates differ, so the exact valuation remains uncertain.
How it happened
- The attacker obtained temporary validator signing power and amplified stake for the bridge checkpoint process.
- Malicious checkpoint and exit proofs authorised withdrawals of assets from the Ethereum-side bridge.
Protocol details
Classification
Protocol Logic / Key Compromise / Bridge
Protocol Type
Exploit/Access control
Category
Bridge Hack
Implementation language
Solidity
Protocol links
Website
@ShibariumNet
Evidence
- report @0xZilayo incident report x.com
- report @Shibizens incident report x.com
- report Shibarium Bridge Exploit: Kaal Drops Latest Dev Report Post Hack news.shib.io
- analysis Website reference coindesk.com
- analysis Website reference coincentral.com
- analysis DeFiLlama defillama.com
- analysis Shibarium - Shiba Inu Documentation docs.shib.io
- analysis Shiba Inu Ecosystem Heats Up news.shib.io
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
