Bedrock, a crypto liquid restaking protocol, recently suffered a $2 million loss due to a security exploit. Web3 security firm Dedaub detected a vulnerability in Bedrock’s uniBTC vaults on September 26 and alerted the protocol. However, Bedrock didn't act quickly enough, and the attacker exploited the flaw before it was fixed.
The attacker stole $2 million but had the potential to take up to $75 million. On September 27, Bedrock confirmed the breach and assured users that remaining funds were secure. The protocol is now working on compensating affected investors and collaborating with auditors to recover the stolen funds.
In a notable move, Bedrock reached out to the hacker via an onchain message, offering a reward and a potential role as a white hat hacker. As of yet, the hacker has not responded.