Verus Incident Analysis

## Executive summary On July 23, 2026, an attacker exploited a semantic/parsing inconsistency between Verus notarizations and the Verus→Ethereum bridge contract to inject malicious state roots and submit fabricated import proofs, draining roughly $7.44M in ETH, tBTC, stablecoins, and MKR; the report details notarization poisoning, Ethereum relay steps, the bridge export/import manipulation, key addresses/transactions, and subsequent fund laundering.