Skip to main content
Sign in

ForceBridge

avoid.net/forcebridge→20/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5GGq22…9Cvy

Summary

ForceBridge is a cross-chain bridge operated by Magickbase on the Nervos Network (CKB), enabling transfers between Nervos and Ethereum and BNB Chain. On June 2, 2025, the bridge was exploited via an access control vulnerability — likely a compromised private key — resulting in approximately $3.7–3.9 million in user funds being stolen and laundered through Tornado Cash. The exploit occurred just one day after Magickbase announced the bridge's sunset, raising questions about the timing and origin of the attack.

Connected Entities

1 entities
Organizations
□ForceBridge
Relationships
    Have evidence about ForceBridge?

    Timeline(8 events)

    14 October 2021

    ForceBridge launches on Nervos Network mainnet, enabling cross-chain transfers between CKB, Ethereum, Cardano, and Polkadot.

    31 May 2025

    Magickbase announces the sunset of ForceBridge and Godwoken, citing low user activity and high maintenance costs. Six-month withdrawal window announced.

    2 June 2025

    ForceBridge exploited via access control vulnerability (likely compromised private key). Approximately $3.7–3.9 million in ETH, USDC, USDT, DAI, and WBTC stolen across Ethereum and BNB Chain.

    2 June 2025

    Cyvers Alerts first detects and reports suspicious activity involving ForceBridge on X.

    2 June 2025

    Magickbase pauses all ForceBridge bridge contracts and announces investigation. Stolen funds are laundered through Tornado Cash and FixedFloat.

    2 June 2025

    Magickbase publicly discloses $3.7 million in affected funds and announces cooperation with law enforcement and partner exchanges.

    2 June 2025

    Halborn Security publishes technical post-mortem attributing hack to access control failure, noting suspicious timing relative to sunset announcement.

    16 January 2026

    Extended deadline for user withdrawals from Force Bridge. Remaining funds to be held in Magickbase custody.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain13 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 15 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:23 AM

    last updated: 8/30/2026, 3:54:59 AM

    avoid.net — verified advice for a post-truth world