Verus Bridge Attacker Returns 75% of Stolen ETH as Bug Bounty

The security breach involving the Verus-Ethereum cross-chain bridge has reached a partial resolution following the return of a significant portion of the misappropriated funds. On May 22, 2026, blockchain security firm PeckShield reported that the individual responsible for the exploit transferred 4,052.4 ETH back to the project's official team address. This repayment represents approximately 75% of the total assets seized during the security incident that occurred earlier this month.

Details of the Fund Recovery and Bounty Agreement

The initial exploit took place on May 18, 2026, targeting the interoperability infrastructure between the Verus ecosystem and the Ethereum network. The breach resulted in a total loss of approximately 5,402 ETH, valued at roughly 18.58 million USD at the time of the incident. Following negotiations or a unilateral decision by the exploiter, the following distribution of funds has been confirmed:

• The attacker returned 4,052.4 ETH (approx. 13.5 million USD) to the Verus team.
• The exploiter retained 1,350 ETH in their private wallet.
• The retained amount, accounting for 25% of the stolen capital, is being treated as a de facto bug bounty.

Cross-chain bridges remain a high-risk component of decentralized finance (DeFi) infrastructure due to the complexity of smart contract interactions across different consensus mechanisms.

Impact on the Verus Ecosystem and Security Measures

While the return of the majority of the capital mitigates the immediate financial impact on the Verus community, the incident highlights ongoing vulnerabilities within cross-chain protocols. Data from on-chain monitoring tools indicates that the returned Ethereum has been secured in a multi-signature wallet controlled by the developers. The project has yet to release a detailed post-mortem regarding the specific technical flaw that allowed the 18.58 million USD drainage, though the acceptance of a 25% bounty suggests a "white hat" or "grey hat" resolution to the conflict.

The resolution of the Verus bridge exploit follows a growing trend in the cryptocurrency industry where attackers negotiate legal immunity or rewards in exchange for the restitution of user funds. By recovering 75% of the assets, the protocol can begin the process of reimbursing affected liquidity providers and restoring the functional integrity of the Verus-Ethereum gateway. However, the retention of over 1,300 ETH by the attacker underscores the high cost of security failures in the current decentralized landscape.