Incident Overview
On January 8, 2026, Truebit Protocol suffered a $26.5 million exploit when an attacker exploited an integer overflow vulnerability in the getPurchasePrice() function, allowing them to mint hundreds of millions of TRU tokens for 0 ETH and sell them, draining 8,535 ETH from contract 0x764C64b2…302EF2, causing TRU token to drop 100% in value.
CertiK's analysis identified the root cause as a calculation overflow in the getPurchasePrice() function. The exploiter manipulated the function by inputting exceptionally large amount values , causing the numerator calculation to exceed 2^256 and overflow. Since the denominator (v6 = 25 * total_supply * total_supply) remained much larger than the overflow portion of the numerator, the division result rounded down to zero.
This allowed the attacker to repeatedly mint hundreds of millions of TRU tokens for 0 ETH cost, then immediately sell them on the market for ETH. PeckShield noted this same exploiter had previously attacked Sparkle protocol approximately 12 days earlier, obtaining 5 ETH and depositing it into Tornado Cash. Truebit immediately advised the public not to interact with the affected contract and contacted law enforcement.
Exploiter: https://etherscan.io/address/0x6C8EC8f1…562b50
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Truebit, these are the critical security checks that could have prevented this incident (January 2026).
- Verify all logic paths related to Bonding Curve Exploit / Other are guarded by proper access controls and input validation
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialProof-of-Concept Exploits
On-Chain Evidence & References
Sources & References
Learn to Prevent the Next Truebit
The Truebit hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.