Hackers Drain $3M in Crypto from Nervos Network’s Cross-Chain Bridge

Highlights:

• Nervos Network’s cross-chain bridge was the target of sophisticated hackers who stole $3 million from the platform.
• The scammers stole cryptocurrencies like USDT, USDC, DAI, ETH, WBTC, and BNB.
• Nervos Network reacted to the hacking incident by halting operations and employing the services of local law enforcement agencies.

Blockchain investigation firm Cyvers Alerts has detected suspicious transactions on Nervos Network’s cross-chain bridge (Force Bridge). The compromise resulted in crypto losses worth about $3 million, according to Cyvers Alerts’ trending X post. The on-chain security outfit disclosed the hacking incident in a June 2 tweet, sparking crypto vulnerability concerns among users.

In the X post, Cyvers Alerts highlighted the stolen crypto assets. These include 257.8K Tether (USDT), 893.3K USD Coin (USDC), 60.4K DAI, 539.09K Ethereum (ETH), and 0.79 Wrapped Bitcoin (WBTC). The blockchain security firm added that all stolen tokens were swapped for ETH and moved to the popular crypto mixing protocol, Tornado Cash (TORN).

🚨ALERT🚨Our system has detected multiple suspicious transactions involving @NervosNetwork.

A suspicious address appears to have taken control over the bridge, stealing ~$3M in assets:
257.8K $USDT
539.09 $ETH
898.3K $USDC
60.4K $DAI
0.79 $WBTC
All funds were swapped to $ETH and… pic.twitter.com/jA3EZVpTeN

— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) June 2, 2025

Extractor Reports Higher Figures in Stolen Crypto Assets

Extractor, another blockchain security outfit, also reported the hack incident. However, contrary to Cyber Claims statistics, Extractor reported that the hackers stole $3.9 million in crypto. The stolen assets included Ethereum and Binance Coin, according to the on-chain security platform’s post.

Extractor stated:

“Nervos Network’s Force Bridge was exploited due to an Access Control vulnerability for $3.9m worth of assets ($3.1m on ETH and $800k on BNB Chain)!”

The Security outfit noted that there was a failed attempt at gaining unauthorized access to Nervos Network’s Cross-Chain bridge before the successful hack incident. It also stated that the scammers moved the stolen funds to Tornado Cash and FixedFloat.

🚨 Security Alert 🚨 Nervos Network's ForceBridge was exploited due to Access Control vulnerability for $3.9m worth of assets ($3.1m on ETH and $800k on BNB Chain)!

There was failed attempt to execute an attack 6 hours prior to successful one.

Most of funds were already… pic.twitter.com/bxKKuauO5F

— Extractor | Web3 Threat Detection & Compliance (@extractor_web3) June 2, 2025

Nervos Network Swings into Action

As expected, Nervos Network has initiated appropriate steps to recover the stolen funds and prevent further losses. In an X post, the compromised platform noted that it has halted all operations on the network and has opened investigations into the hacking incident.

In a follow-up tweet, Nervos Network said that it is collaborating with local law enforcement agencies and other exchanges to identify the culprits behind the hacking incident. The blockchain firm also noted that the compromise resulted in losses worth about $3.7 million.

Nervos Network stated:

“We are actively collaborating with local law enforcement and partner exchanges to investigate this incident and identify the responsible party. The total affected funds are approximately $3.7M ($3.1M on ETH and $0.6M on BNB chain).”

The compromised platform assured users of its commitment to restoring the stolen funds and resuming operations as soon as possible. In addition, Nervos Network noted that it would update users on new developments through its X handle. The platform also thanked users for their patience and continuous support.

We are actively collaborating with local law enforcement and partner exchanges to investigate this incident and identify the responsible party. The total affected funds are approximately $3.7M ($3.1M on ETH and $0.6M on BNB chain). https://t.co/105Ix1aU37

— Magickbase (@magickbase) June 2, 2025

Crypto Hacks Wipe out Over $200 Million in May

On May 1, PeckShieldAlert, another leading blockchain security outfit, published a summary of crypto hack incidents last month. According to the report, the crypto space experienced 20 major hacks, resulting in losses worth roughly $244.1 million. This value was significantly less than the $402.11 million stolen in April. However, it was higher than the $33.46 million recorded in March.

In the X post, PeckShieldAlert highlighted the top five hack incidents that resulted in significant losses. Cetus Protocol, a leading Decentralized Exchange (DEX), topped the losses chart after forfeiting approximately $220 million in a security compromise. After initiating several recovery efforts, the DEX platform recovered $157 million, accounting for 71% of the stolen funds.

Cork Protocol was also another victim of crypto scammers last month. In one of its May 28 news articles, Crypto2Community reported that the platform lost $12 million in wstETH via a malicious smart contract. Per PeckShieldAlert, an individual also forfeited $5.2 million to North Korean hackers. Scammers have also targeted Mobius token and MapleStory Universe, stealing $2.16 million and $1.2 million, respectively.

#PeckShieldAlert In May 2025, ~20 major crypto hacks were recorded, resulting in total losses of $244.1M—a 39.29% decrease from April. Notably, @CetusProtocol & #SUI have frozen a combined $157M of stolen funds (representing 71% recovery from the $220M theft). #Top 5 Hacks in… pic.twitter.com/ZJmGZvbthS

— PeckShieldAlert (@PeckShieldAlert) June 1, 2025