The team behind the Shiba Inu ecosystem has released a detailed update following the recent hack of the Shibarium Bridge.
As previously reported, hackers gained unauthorized access to the Shibarium Bridge validator and drained multiple cryptocurrency assets, including SHIB and ETH, totaling over $4 million.
The team swiftly moved to suspend the bridge to protect the remaining funds. Now, top developer Kaal Dhairya provides the community with a detailed update on the incident and the measures to contain it.
What Really Happened
In a personal foreword, Dhairya expressed frustration with the incident. Explaining what really happened, he noted that the incident occurred on September 12, at 18:44 (UTC). Around that time, malicious actors compromised validators’ keys to push a malicious state through Shibarium’s Bridge.
Using stake amplification and manipulated checkpoint proofs, they withdrew multiple assets, such as SHIB, ETH, and ROAR. He confirmed that the attackers have already sold some of these assets, but refused to share details about the transactions for security reasons.
Containment Measures
Following the attack, Dhairya said the team has implemented several measures to contain the breach and prevent a possible recurrence. Notably, the ecosystem team has restricted the bridge operations to block further unauthorized withdrawals.
It also implemented contract-side protections to secure deposits, withdrawals, and staking paths. Additionally, the team has also secured portions of BONE tokens at risk and immobilized the attackers’ short-term stake.
Other containment measures include shifting to multi-party hardware custody while also rotating validators’ signers. It has also engaged independent researchers, law enforcement, and response firms to assist with ongoing investigations.
In the meantime, a 24/7 monitoring system has been deployed to monitor the attackers’ on-chain flows.
Roadmap Forward
Dhairya outlined a four-phase roadmap to strengthen security and guide the project’s recovery from the recent hack.
The first phase, dubbed containment, which is currently ongoing, involves maintaining bridge restrictions and live monitoring. The second phase (Hardening) has commenced. In this phase, Shiba Inu, alongside cybersecurity firm Hexens, will implement stronger custody and other infrastructure upgrades.
The third phase is called Safe Restoration. Here, the team plans to reopen Shibarium Bridge after a full independent review, as well as successful integrity checks and tests.
Lastly, the Postmortem and community process involves publishing a full report and proposing remediation strategies for affected users.
No Date for Bridge Reopening and Asset Recovery
With the bridge still paused, Dhairya emphasized that the team’s priority is containment and implementation of hardening measures to prevent any further losses.
However, Dhairya did not specify any timeline for the bridge’s reopening, assuring the community that the team will share updates through official channels.
Responding to questions about asset recovery, he suggested that the team will also share any compensation or claims process later, once the bridge is secured.
Furthermore, if the funds cannot be recovered, the team will develop a backup plan to be presented to the community for review once a secure solution is in place.
In the meantime, the team has taken notable steps toward recovering the stolen assets. As reported by The Crypto Basic, Shiba Inu partnered with K9 Finance to launch a bounty program, offering the attackers 50 ETH as an incentive to return the funds. So far, the team has not revealed whether the attackers have made any contact to accept the offer.
DisClamier: This content is informational and should not be considered financial advice. The views expressed in this article may include the author's personal opinions and do not reflect The Crypto Basic opinion. Readers are encouraged to do thorough research before making any investment decisions. The Crypto Basic is not responsible for any financial losses.
