Shibarium cross-chain bridge was attacked by lightning loans, with losses of over $2.4 million

PANews reported on September 14 that according to The Block, the Shibarium cross-chain bridge connecting the Layer 2 network and Ethereum was hacked, causing $2.4 million in losses. The developers suspended staking, unstaking and related processes to rotate and protect verifier keys. The attacker borrowed 4.6 million BONE tokens (Shibarium’s governance token) through Lightning Loan and appeared to have obtained 10 of the 12 validator signature keys to protect the network security, thus giving himself a two-thirds majority stake. The attacker then used his privileged status to steal about 224.57 ETH and 92.6 billion SHIBs from the Shibarium bridge contract and transfer the funds to his own address. At current prices, these funds are worth approximately $2.4 million. In response to the attack, Shiba Inu developers suspended staking and unstaking capabilities on the network, effectively freezing borrowed BONE tokens (those tokens have been affected by the destaking delay) and leaving the attacker with most control. The attackers also received a large number of K9 (KNINE) tokens (related to K9 Finance) worth approximately $700,000. When the attacker tried to sell KNINE, K9 Finance DAO stepped in and blacklisted the attacker's addresses, making these tokens unsold.