Which exploit impacted ETH this week?

TLDR

The exploit was the Truebit (TRU) protocol breach, which drained about 8,535 ETH (~$26.6M) via an old contract vulnerability reported this week.

1. Root cause: a mispriced minting function in a legacy contract enabled free TRU mints and siphoned ETH reserves through a bonding curve loop details here.
2. Market impact: TRU plunged ~99.9% after the breach, and the team said law enforcement is involved as covered.
3. Also this week: a separate low-value campaign drained hundreds of EVM wallets in small amounts, mainly on Ethereum reported here.

Deep Dive

1. How It Happened

Truebits old smart contract had a pricing logic flaw. Large mint requests could return a zero price, letting attackers mint TRU at no cost, sell back on the bonding curve, and drain ETH reserves. A significant share of proceeds was routed through Tornado Cash, consistent with laundering after exploits technical summary.

• The breach removed about 8,535 ETH (~$26.6M), highlighting the risk profile of legacy contracts that remain upgradeable or callable incident recap.
• Truebit warned users not to interact with the implicated contract while it investigates and coordinates with authorities [same report above].

2. Immediate Market Effects

The immediate fallout was a collapse in TRUs price, down roughly 99.9% within hours as liquidity and confidence evaporated market reaction.

• Protocol-side responses matter; contacting law enforcement and isolating the contract can limit further damage, but secondary market impacts are swift, especially for smaller caps with thinner depth [the report above].
• Funds moving through mixers complicate recovery and can extend uncertainty windows technical summary.

3. Other ETH-Linked Incidents This Week

Separately, a wide-net wallet-draining campaign hit hundreds of small-balance EVM wallets, with most losses under $2,000, and a majority of stolen funds traced to Ethereum addresses overview.

• Reports suggest phishing vectors and malicious extensions were involved, with activity spanning multiple EVM chains [same overview above].
• In another thread from prior weeks still unfolding, a compromised multisig whale wallet laundered roughly 6,300 ETH via Tornado Cash after a larger $27M theft, underscoring ongoing key management risks update.

Conclusion

This weeks ETH-impacting exploit was the Truebit protocol breach tied to a legacy contract flaw, which drained about 8,535 ETH and triggered a near-total collapse in TRU. In parallel, smaller wallet-drain campaigns and key compromise incidents kept security top of mind. The pattern is clear: legacy code, user security hygiene, and liquidity depth determine how much an exploit moves markets in the short run.