Cross-chain bridge infrastructure has once again emerged as the crypto ecosystem’s weakest link. Two separate incidents struck two different networks in succession within less than 24 hours. Through a contract exploit, an attacker breached B-Squared Network and drained 8.59 million B2 tokens worth $3.86 million. A report by @lookonchain on X, which garnered 216 likes and 21 retweets, noted that the perpetrator wasted no time, immediately dumping the entire stash of B2 tokens for 5,409 BNB worth $3.01 million before market prices plummeted.
However, the most intriguing aspect of the B-Squared exploit is not merely the stolen sum, but how the illicit funds were wiped off the radar.
Escape Routes Abandon the Old Playbook
Typically, DeFi hackers rely on privacy mixers like Tornado Cash to break the on-chain audit trail. In B-Squared’s case, however, the attacker devised a more convoluted laundering path. The stolen funds were first bridged over to the Ethereum network and swapped for ETH and USDT. Rather than stopping by routing them into a mixer, the attacker chose to deposit all of these funds into NEAR Intents and HOT Protocol. This unusual move highlights an emerging trend where attackers leverage alternative protocols to launder illicit proceeds.
On the very same day, the Verus Ethereum Bridge was also compromised with an even larger loss of $7.55 million. On-chain data from @lookonchain confirmed the incident, detailing that the attacker immediately converted all stolen assets into 3,916 ETH valued at $7.52 million. For Verus, the exploit marks a recurring nightmare, serving as their second exploit after suffering a similar breach in May 2026. Unlike the B-Squared exploiter, the Verus attacker stuck to the traditional playbook, funneling all the funds straight into Tornado Cash.
July Approaches Nearly $100 Million in Losses
Today’s string of breaches further compounds DeFi’s troubled security track record. Prior to the B-Squared and Verus incidents, AFX Trade on the Arbitrum network was drained of $24 million after private keys controlling its bridge system were compromised. Citing an analytical report from CryptoRank, the accumulated losses from this flurry of exploits pushed total crypto hack damages in July 2026 rapidly toward the $100 million threshold.
Repeated vulnerabilities underscore an undeniable pattern: cross-chain touchpoints remain the softest targets for malicious actors. When a bridge holds deep liquidity while harboring even a single fatal security flaw, it inevitably invites attack. Funds are siphoned rapidly, split across complex routes, and vanish without a trace. Ultimately, these incidents leave asset holders in the most vulnerable position as protocol designs fail to keep pace with the agility of attackers.
Reported via @lookonchain on X.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
