Between May 15 and May 18, 2026, three separate cross-chain protocols lost a combined $99.1 million to exploits. THORChain's Asgard vault was drained of $10.8 million via a suspected GG20 threshold signature scheme vulnerability. Echo Protocol on Monad lost $76.7 million through an admin private ...
"In all, persistent security vulnerabilities and a stagnant TVL continue to limit DeFi's institutional appeal, while each successive exploit reinforces a flight-to-safety pattern that tends to favor Tether's USDT." — JPMorgan Analysts, Global Markets Strategy Note (April 2026)
Between May 15 and May 18, 2026, three separate cross-chain protocols lost a combined $99.1 million to exploits. THORChain's Asgard vault was drained of $10.8 million via a suspected GG20 threshold signature scheme vulnerability. Echo Protocol on Monad lost $76.7 million through an admin private key compromise that allowed the attacker to mint 1,000 unbacked synthetic Bitcoin. The Verus-Ethereum bridge surrendered $11.6 million after attackers identified a settlement verification flaw that cost $10 to exploit and could have been prevented by 10 lines of code.
The three incidents share a common thread: each targeted infrastructure that moves value between chains. None exploited a smart contract logic bug on a single chain. The attack surfaces were, respectively, a cryptographic signing protocol, an operational key management failure, and a bridge validation gap. Peckshield has now tracked eight bridge-related exploits totaling $328.6 million through mid-May 2026. Year-to-date, DeFi protocols have lost over $1 billion across more than 68 incidents, according to Protos, with April alone recording $651 million — the worst month on record per CertiK data.
On May 15, 2026, THORChain halted all trading and signing operations after one of its six Asgard vaults was compromised. The protocol confirmed losses of $10.7 million to $10.8 million across four blockchains: Bitcoin, Ethereum, BNB Chain, and Base.
What was taken: The attacker's wallets, identified by PeckShield and Cyvers, held 3,443 ETH ($7.77 million), 36.85 BTC ($2.97 million), and 96.6 BNB ($66,000) at the time of detection.
Root cause (suspected): The working theory centers on a vulnerability in the GG20 Threshold Signature Scheme (TSS) implementation used to secure Asgard vault keys. Rather than a single key compromise, the attack appears to have involved gradual leakage of vault key material during keygen or signing rounds — a class of malformed-proof exploitation that the TSSHOCK family of CVEs first identified in 2023. Once sufficient key shards had been reconstructed offline, the attacker could forge outbound signatures without triggering quorum checks.
A newly churned node (thor16…n84q) that entered the network several days before the attack is the primary suspect. Chainalysis reported pre-attack fund movements through Monero and Hyperliquid linked to the same actor.
Response timeline:
The RUNE token fell 12% immediately after the exploit disclosure and traded at approximately $0.45 as of May 19.
The incident has reignited debate over MPC wallet security. The GG20 protocol, published by Gennaro and Goldfeder in 2020, is widely deployed across DeFi bridges and custodial infrastructure. Security firm Verichains first demonstrated TSSHOCK key extraction attacks against GG20 implementations in late 2022, and disclosed findings to affected parties throughout 2023. Newer protocols such as CGGMP21 and CGGMP24 offer stronger guarantees against malformed-proof attacks. The THORChain exploit is expected to accelerate migration discussions across multiple protocols.
On or around May 16, 2026, Echo Protocol — a cross-chain bridge operating on Monad — suffered the month's largest single exploit. An attacker minted 1,000 eBTC (synthetic Bitcoin) worth approximately $76.7 million.
Attack mechanics: This was not a smart contract logic flaw. The root cause was operational: a single-signature admin private key was compromised. The protocol's architecture contained multiple compounding weaknesses:
The attacker deposited 45 eBTC ($3.45 million) into Curvance as collateral, borrowed 11.3 wBTC ($868,000), bridged to Ethereum, swapped for ETH, and sent 384 ETH ($822,000) to Tornado Cash. The remaining 955 eBTC ($73 million) remains in the attacker's wallet as of May 19.
Monad's position: Monad co-founder confirmed the underlying network was not affected. The vulnerability was entirely at the application layer.
The Echo Protocol incident follows a pattern established by Wasabi Protocol ($4.5 million admin key compromise on April 30), Drift Protocol ($285 million admin key + social engineering on April 1), and earlier incidents at Ronin Network (2022) and Radiant Capital (2024). According to security researchers, private key compromises accounted for 88% of stolen funds in Q1 2025, and the pattern has intensified in 2026.
On May 18, 2026, the Verus-Ethereum bridge was exploited for $11.58 million in assets: 103.6 tBTC (Threshold Network tokenized bitcoin), 1,625 ETH, and 147,000 USDC. The attacker later consolidated all assets into 5,402.4 ETH.
Technical flaw: The bridge validated state roots and transaction hashes but did not confirm actual backing asset amounts during settlement verification. This gap allowed the attacker to craft transactions at minimal cost — reportedly $10 — and drain the reserve. Security researchers noted the fix would require approximately 10 lines of additional verification code.
Laundering: The exploiter swapped stolen assets for ETH and began routing funds through Tornado Cash. As of reporting, Blockaid confirmed the attack remained partially active, indicating the bridge had not been fully secured at the time of detection.
The Verus exploit brought the 2026 bridge-specific exploit total to $328.6 million across eight incidents, according to Peckshield. CertiK labeled April's wave of bridge attacks a "high-stakes shift" in cross-chain cybercrime tactics.
The three exploits in five days illustrate three distinct failure modes in cross-chain infrastructure:
| Protocol | Loss | Attack Vector | Failure Class | |----------|------|---------------|---------------| | THORChain | $10.8M | GG20 TSS key shard leakage via rogue node | Cryptographic protocol vulnerability | | Echo Protocol | $76.7M | Single-sig admin key compromise | Operational security / access control | | Verus Bridge | $11.6M | Settlement verification gap ($10 exploit cost) | Validation logic omission |
Each category carries different implications for the industry:
Cryptographic protocol vulnerabilities (THORChain) require protocol-level migration. Fixes cannot be deployed unilaterally — they require coordinated upgrades across node operators. The GG20-to-CGGMP migration path is well-understood technically but operationally difficult for live systems managing real assets.
Operational security failures (Echo Protocol) are the most common and arguably most preventable attack class. Multisig requirements, timelocks, minting caps, and rate limits are standard defensive measures. Their absence in a protocol holding $76.7 million in synthetic assets represents a governance and risk management failure.
Validation logic omissions (Verus) represent the simplest technical failures with the highest return on attack investment. A $10 exploit cost yielding $11.6 million — a 1,160,000x return — underscores how incomplete verification routines remain a systemic issue in bridge architecture.
The numbers define the scope of the problem:
For comparison, CertiK recorded $2.47 billion in total crypto hack losses for all of 2025. At the current 2026 pace, annualized losses would approach $2.5 billion, matching last year's full total in roughly half the time.
North Korean-linked actors now account for 76% of all crypto theft in 2026, according to TRM Labs data. The Lazarus Group has been preliminarily linked to the $292 million Kelp DAO bridge exploit on April 18 and the $285 million Drift Protocol attack on April 1 — both involving prolonged social engineering campaigns.
JPMorgan's Global Markets Strategy team published a note in April 2026 stating that persistent DeFi exploits and stagnant TVL (measured in ETH terms) continue to limit institutional interest. The bank cited a pattern: each successive exploit triggers a flight-to-safety toward Tether's USDT, as users evacuate DeFi positions for centralized stablecoin liquidity.
The data supports this observation. After the $292 million Kelp DAO exploit on April 18, Aave experienced $8.45 billion in deposit outflows within 48 hours — a 45:1 contagion ratio, meaning $45 of capital left DeFi for every $1 directly stolen. Aave's TVL fell from $26.4 billion to $17.5 billion. The $13 billion in total TVL outflows extended to pools with no direct exposure to the compromised asset.
Bloomberg reported the contagion as "DeFi's Lehman moment" — not in scale, but in demonstrating how interconnected protocols amplify localized failures into sector-wide capital flight.
The structural challenge is clear: institutional capital requires predictable loss parameters. Traditional finance tolerates operational risk through insurance, capital buffers, and regulatory backstops. DeFi offers none of these at scale. Bug bounty platforms like Immunefi have paid out over $100 million to ethical hackers, but the asymmetry persists — attackers captured more than $1 billion in 2026 while bounty payouts remain orders of magnitude smaller.
The five-day cluster of exploits between May 15 and May 18 did not introduce new categories of risk. Threshold signature vulnerabilities, admin key compromises, and bridge validation failures are documented attack classes with known mitigations. What the cluster demonstrates is the gap between known best practices and deployed infrastructure.
THORChain's GG20 implementation remained in production years after TSSHOCK demonstrated key extraction attacks against the same protocol family. Echo Protocol operated a $76.7 million synthetic Bitcoin minting facility behind a single-signature admin key with no timelock or supply cap. Verus's bridge validation omission required 10 lines of code to fix.
The aggregate effect compounds through contagion. Each exploit erodes confidence not just in the affected protocol but across the sector. JPMorgan's observation — that institutional DeFi adoption remains constrained by security failures — reflects a structural problem that no individual protocol fix can address. The question is whether the $328.6 million in bridge losses through mid-May represents a catalyst for industry-wide infrastructure upgrades, or another data point in a recurring pattern.
The data suggests the latter until proven otherwise.