Taiko Halts Its Ethereum Layer-2 After a $1.7M Bridge Exploit

Taiko halted its Ethereum layer-2 network on June 22 after an attacker drained roughly $1.7 million from the network's bridge and token vault. The withdrawals were authorized by forged proofs submitted on Ethereum, claims of Taiko-side deposits that had never been made. BlockSec, the security firm that traced the attack, tied it to an exposed signing key belonging to Raiko, Taiko's proving component, which had been committed to a public GitHub repository. Within hours Taiko stopped producing blocks, froze bridge withdrawals, urged users to move funds out of the bridge and asked exchanges to suspend TAIKO deposits. The token fell about 10% on the day, CoinDesk reported.

A key that vouches for work it never saw

Taiko's proving setup relied on SGX, a processor feature that runs code inside an enclave, an isolated region of memory that other software on the same machine cannot read or alter. The enclave holds a private signing key and uses it to sign a statement that a particular computation ran inside genuine, unmodified hardware and produced a particular result. Contracts on Ethereum do not repeat that computation. They check the signature and accept the result as attested. That is what makes hardware-based proving cheap to verify, and also its single point of failure: an attestation is worth exactly as much as the secrecy of the key behind it.

A bridge withdrawal runs on the same logic. The contract on Ethereum releases assets only when shown evidence that a corresponding deposit or burn was recorded on the layer-2. An attacker holding the enclave key can sign that evidence for a transaction that never happened, and the contract has no independent way to tell the difference, because it was built to trust the key, not to re-derive the facts. That is how roughly $1.7 million left the bridge and token vault with nothing on the Taiko side to match it. Nothing was broken in the usual sense of a contract bug. The system did what it was written to do, for the wrong signer.

The secret sat in a public repository

BlockSec attributed the incident to a Raiko SGX enclave signing key committed to GitHub, where anyone who went looking could read it. That reduces the exploit from a cryptographic problem to a housekeeping one: the attacker never had to defeat the enclave, only to find the secret the enclave was supposed to be the sole holder of. Committed secrets are among the oldest failure modes in software, and unusually costly in proving systems, where one key stands in for the correctness of an entire chain. Rotating it closes the door on future forgeries but does nothing about withdrawals already settled on Ethereum.

Stopping everyone to stop one attacker

Halting block production on a layer-2 stops the attacker and every honest user in the same motion, since no new transactions confirm until the operator resumes, and it was the bluntest control Taiko had. Bridge withdrawals were frozen within hours, and users still holding assets in the bridge were urged to exit. Taiko also asked exchanges to suspend TAIKO deposits, the standard request when a team wants to slow a token's movement through trading venues while an incident is still being scoped. TAIKO fell around 10%, and the network remained stopped as the day ended.

The price of attested hardware

The immediate questions were whether the bridge would reopen on rotated keys or on a rebuilt proving path, and whether users whose assets backed the forged withdrawals would be made whole. The larger one is what an SGX attestation is worth in production. Layer-2 networks that settle on cryptographic proofs instead of trusted hardware carry a different assumption, one resting on mathematics anyone can check rather than on a manufacturer's silicon and a team's key hygiene. Hardware proving is fast and inexpensive, and June 22 showed what that trade costs when key handling fails. The halt carried a second lesson. A network its operators can stop in an afternoon is one whose users depend on those operators being attentive as well as honest.