Hack history / 2025 / Hack or exploit

Shibarium

Hack or exploit on Sep 13, 2025 · Validator Key Compromised

IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES

Lost

$2.4M

sources: $2.4M to $4.1M

Returned

none listed

as the sources state it

Rank

#641

among thefts by dollars lost

What happened

On September 12, 2025 at 18:44 UTC, an attacker compromised 10 of Shibarium's 12 validator keys and used a 4.6M BONE flash loan delegated to Ryoshi Validator 1 to push past the two-thirds threshold, then co-signed a false L2 state and drained 17 tokens worth ~$4.1M from the canonical bridge. The dev team suspects key exposure from a developer machine or the server's KMS.

In review: sources disagree on the loss.

Details

Date: Sep 13, 2025
Kind: Hack or exploit
Method: Validator Key Compromised
How in: Keys, accounts and infrastructure
Target: DeFi protocol
Chains: Shibarium

Reported by

Related incidents

Shibarium Bridge 2023 · Costly mistake or other · $2.6M

Cite this page

SwanBluechip, "Shibarium hack, Sep 13, 2025: $2.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6be272d114/ (data as of 2026-11-01).

Open in the full list All incidents