Pricing flaw in outdated Truebit smart contract drains $26M, sending TRU token nearly to zero.
Truebit Protocol’s TRU token collapsed to near zero after the computation verification protocol confirmed a security incident involving an Ethereum smart contract.
Roughly 8,535 ETH, worth about $26 million at current prices, was drained in the attack. As blockchain security firms scrambled to sound the alarm, the native TRU token plummeted nearly 100%.
Truebit Reports Security Incident
Truebit’s team confirmed the “security incident involving malicious actors,” but details on remediation remain sparse.
The protocol has warned users not to interact with the affected contract until further notice. Truebit is working with law enforcement and taking all available measures to contain the situation, promising updates through official channels as they become available.
Truebit is an early Ethereum protocol designed to make complex off-chain computations verifiable on-chain using the TRU token. Its design helped shape later scaling solutions, but never achieved broad adoption itself.
Experts Point to Pricing Failure
Blockchain security experts say the $26 million Truebit exploit was caused by a critical flaw in the pricing logic of an outdated “Purchase” smart contract, deployed nearly five years ago without verified source code.
The vulnerability allowed attackers to manipulate the minting function with extremely large inputs, driving the calculated TRU token price close to zero.
This enabled them to mint massive quantities for free or pennies and repeatedly sell them back through the bonding curve, ultimately draining the protocol’s ETH reserves. The attack resulted in the theft of 8,535 ETH.
The stolen ETH was quickly moved to at least two addresses. Some of the funds were later sent through Tornado Cash, a privacy mixer commonly used to obscure transaction trails. It remains unclear whether any user-held assets beyond the protocol’s reserves were affected.
Market Reaction Wipes out TRU liquidity
The market reaction was immediate and severe. TRU plummeted more than 99%, falling from roughly $0.16 to a fraction of a cent within hours, wiping out liquidity and leaving many holders stranded.
After more than half a day, the TRU token has bounced back slightly, rising to around $0.03 at the time of writing.
Why it Matters
The exploit highlights a persistent risk in crypto: even long-standing protocols can harbor hidden vulnerabilities. Truebit’s age worked against it: outdated code, lack of verified source, and minimal maintenance left it exposed.
Check out DailyCoin’s popular crypto news today:
WIF Price Pulls Back After 70% Rally, Arriving At ‘Make-or-Break’ Zone
Trump-Linked World Liberty Seeks Trust Bank Charter for USD1
