Taiko, an Ethereum Layer 2 network, halted block production and urged users to withdraw their funds after discovering an exploit. The team has not yet disclosed the total value at risk or confirmed whether funds were actually drained.
Blockaid, an onchain security firm, identified a potential root cause: a flaw in Taiko's bridge source-signal proof validation. Source-signal proof is the cryptographic mechanism bridges use to verify that messages or transactions on one chain genuinely originated on another chain. If that validation fails, the bridge could accept fraudulent or unverified signals, potentially allowing unauthorized transfers between chains.
Taiko's halting of block production is the standard protective measure for Layer 2 networks facing a critical bug. By stopping new block creation, the team prevents additional state changes that could compound the damage while engineers investigate and prepare a fix.
The specifics remain sparse: the team has not released a detailed postmortem, confirmed affected amounts, or announced a timeline for resuming normal operation. Users were instructed to withdraw their holdings directly to Ethereum mainnet, suggesting the team expects the Layer 2 itself to remain unsafe until the vulnerability is patched and security is restored.