Incident Overview
On September 15, 2025, Shibarium, Shiba Inu's layer-2 network, suffered a flash loan attack that resulted in approximately $2.4 million in losses. The attacker borrowed 4.6 million BONE tokens to gain control of 10 out of 12 Shibarium validators, allowing them to drain assets from the bridge connecting Shibarium to Ethereum.
The attacker executed a sophisticated flash loan attack by borrowing 4.6 million BONE tokens (Shibarium's governance token) to gain majority control of the validator system. With control over 10 of the 12 validators, the attacker was able to approve unauthorized transactions and drain approximately $2.4 million in ETH and SHIB tokens from the bridge that connects Shibarium to the Ethereum mainnet. The Shibarium team prevented a larger breach because the borrowed BONE tokens remained locked by staking rules.
The team clarified this was not a protocol hack but rather an exploitation using "stolen validator keys" to push a fake state and access bridge funds. The attack caused significant market impact, with SHIB dropping 11.5% from its monthly high and BONE token falling 43.5% from its September peak.
Incident Report
Protocol Information
Market Context at Time of Hack
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Shibarium, these are the critical security checks that could have prevented this incident (September 2025).
- Verify all logic paths related to Access Control are guarded by proper access controls and input validation - see the Access Control Attacks attack class for patterns
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialRelated Attack Classes
The technique used in this hack maps to these vulnerability classes in our security curriculum:
Sources & References
Learn to Prevent the Next Shibarium
The Shibarium hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.