June 2026 Cross-Chain Bridge Exploit ($127M, Three Protocols)
Summary
An alleged coordinated cross-chain bridge exploit on June 14, 2026 is described as draining $127 million from three DeFi protocols — identified only as BridgeLink, CrossFlow, and Relay Protocol — across Ethereum, Arbitrum, and Polygon in under 12 minutes. This specific incident, including the protocol names, the $127M figure, and the 03:42 UTC timestamp, cannot be independently verified through any Tier 1 or Tier 2 source as of June 30, 2026; the sole primary source is a blog post by Nadcab Labs, an Indian blockchain development services company with a commercial interest in publishing DeFi security content. While a severe pattern of verified cross-chain bridge exploits across 2026 provides real context, the specific claims in this investigation request should be treated as unverified until corroborated by credible on-chain analysis or major news coverage.
Connected Entities
1 entities · 10 linked investigationsTimeline(9 events)
2022-02-02
Wormhole bridge hack: approximately 120,000 wETH (~$320-325M) stolen via signature verification bypass. This is the actual 'Wormhole incident' referenced in the investigation context — it did not occur in 2026.
Elliptic / Chainalysis2026-04-19
Kelp DAO exploited for approximately $292M via forged LayerZero cross-chain message. Largest verified bridge exploit of 2026 to date.
CoinDesk2026-05-18
Verus-Ethereum bridge exploited for approximately $11.4M via missing source-amount validation in Solidity bridge logic.
CoinDesk2026-05-31
14 verified bridge exploits in 2026 documented through this date totaling approximately $340.7M per CoinGabbar count.
CoinGabbar2026-06-09
Humanity Protocol: private key malware attack drains approximately $30-36M from Hyperlane bridge ProxyAdmin on Ethereum; H token crashes 80-90%.
CoinDesk2026-06-14
Alleged coordinated exploit at 03:42 UTC drains $127M from BridgeLink ($52M), CrossFlow ($48M), and Relay Protocol ($27M) across Ethereum, Arbitrum, and Polygon. This event is asserted by Nadcab Labs but is unverified by any independent Tier 1 or Tier 2 source.
Nadcab Labs (unverified; Tier 3 only)2026-06-17
Nadcab Labs publishes blog post describing the alleged $127M exploit. No corroborating coverage identified from any independent outlet at or after this date.
Nadcab Labs2026-06-22
Taiko Ethereum L2 bridge exploit: leaked SGX signing key on GitHub enables $1.7M in forged withdrawal proofs; Taiko halts block production.
CoinDesk2026-06-25
Taiko announces full restoration of bridge backing following the $1.7M SGX exploit.
CryptoTimesDecision Log
- hash: DHnRf5Cg15Yq4AzeNtnkKZfuD5y5hSGHg9EhRFZUA8N6
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/30/2026, 12:06:00 PM
last updated: 6/30/2026, 12:06:09 PM
avoid.net — verified advice for a post-truth world