Taiko Security Incident: A Postmortem and Next Steps
On the night of June 21, 2026 (UTC), Taiko was attacked. Over the next few hours the attacker forged proofs, pushed a fake version of our Layer 2 finalized onto Ethereum as if it was real, and used it to withdraw roughly USD 1.75 million from the canonical Bridge and the ERC20 token vault. This post is our honest account of it: how we caught the attack, what we did, what we know so far, and everything we did to fix it. TL;DR: The Taiko protocol has a defense-in-depth system. Proving is limite...
