Back to dashboard
Wednesday, March 23, 2022 at 12:24 UTC

Ronin Bridge

Lazarus social-engineered 5/9 validator keys.

Partial
Funds stolen
$624.00M
Recovered
$30.00M5%
Still outstanding
$594.00M
Chain
Ethereum
Category
Bridge
Attack vector
Private Key Compromise
Reported by
Chainalysis
Incident ID
h2022-2

Exploit & recovery timeline

  1. Mar 23, 2022 · 10:24 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the private key compromise exploit against Ronin Bridge.

  2. Mar 23, 2022 · 12:24 UTC
    Exploit executed

    $624.0M drained from Ronin Bridge on Ethereum via Private Key Compromise.

  3. Mar 23, 2022 · 13:24 UTC
    Detected by Chainalysis

    Chainalysis flagged the anomalous transactions and published an initial alert.

  4. Mar 23, 2022 · 16:24 UTC
    Protocol response

    Ronin Bridge paused affected contracts or withdrawals and began tracing outbound flows.

  5. Mar 24, 2022 · 12:24 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Mar 30, 2022 · 12:24 UTC
    Partial recovery

    $30.0M of $624.0M recovered (5%); the remainder is still unaccounted for.

  7. Apr 22, 2022 · 12:24 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.