A NullMeridian record Andromeda Logs

NullMeridianLog

6 Aug 2024

Ronin Bridge: Upgrade Misread Operator Threshold; ~$12M Whitehat Outflow

Ronin: on 6 Aug 2024 a bridge upgrade misinterpreted the required operator vote threshold, allowing ~4,000 ETH plus ~$2M USDC outflows. Treated as whitehat; funds returned; $500k bounty offered.

  • Event date
  • Incident typeBridge configuration fault
  • Bug classValidation
  • Published

Loss, as sourced

About 4,000 ETH and $2M USDC (~$12M), per Ronin statements as carried contemporaneously. Funds returned.

Traceability

Primary sources

  1. 01x.comRonin Network on X (6 Aug 2024) (opens in a new tab)

In brief

Root cause: Per Ronin: bridge upgrade misinterpreted required operator vote threshold.

Timeline, as sourced: 6 Aug pause; whitehat return; bounty; audit before reopen.

Account, as sourced

Claimed (Ronin): funds returned; bridge paused for review.

Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.

Permalinkhttps://andromeda.observer/e/ronin-bridge-threshold-2024