Truebit Hack 2026 — $26M Exploit Analysis

A pricing bug in a Truebit smart contract live for nearly 5 years was exploited to drain ~8,535 ETH (~$26.4M), sending TRU effectively to zero.

Details

• Date: 2026-01-08
• Amount Lost: $26,400,000
• Chain(s): Ethereum
• Category: Bonding Curve Exploit
• Technique: Pricing bug in a smart contract live for nearly 5 years
• Status: Not Recovered
• Amount Recovered: None reported

Full Description

On January 8, 2026, a pricing bug in a Truebit bonding-curve smart contract that had been live for nearly five years was exploited. The attacker drained approximately 8,535 ETH (~$26.4M). The TRU token was effectively reduced to zero with no recovery plan announced.

Laundering Analysis

No laundering activity observed. Stolen ETH held in attacker wallets; no recovery reported.

Sources

• https://www.certik.com/
• https://www.trmlabs.com/

Transaction Hashes

• N/A

Back to Browse