Verus Bridge lost about $7.54 million in a second exploit roughly two months after an earlier $11.58 million attack targeted the same contract. The vulnerability allowed Ethereum payouts without confirming that matching value had been committed on Verus, despite valid signatures and Merkle proofs.
Source: Read the original article
