Old Contracts, Big Problems: Truebit Token Suffers Massive Hacker Drain & Ether Theft

Truebit's TRU token crashed following a $26M Ether theft, exposing legacy smart contract vulnerabilities. A stark reminder in the DeFi world.

Another Day, Another Digital Dollar Disappears

Well, folks, grab a cuppa and settle in. It seems the wild, wired world of decentralized finance just served up another stark reminder of its volatile nature. This time, the spotlight’s on Truebit, an Ethereum-based project that watched its TRU token plummet nearly 99.9% faster than a hot dog vendor closing shop on a rainy Tuesday. The culprit? A sophisticated hacker, who, with a flair for the dramatic, drained approximately 8,535 Ether – a cool $26.6 million – from the protocol’s reserves. It’s a story as old as time, or at least as old as five-year-old smart contracts.

The Glitch in the Old Machine: How the Ether Vanished

According to the digital detectives at Lookonchain and independent researchers like Weilin Li, this wasn’t some cutting-edge, never-before-seen trick. No, this was a classic case of an antique vulnerability. The attacker exploited a flaw in an *older* smart contract, deployed roughly half a decade ago. Imagine that: code from 2021 coming back to bite you in 2026. This particular old-timer had a minting function that, under just the right (or wrong) conditions, would essentially give away TRU tokens for free. Our resourceful hacker then repeatedly bought these 'free' tokens and immediately sold them back into the protocol’s reserve, steadily siphoning off Ether with each transaction. They even reportedly paid a small 'builder bribe' to ensure their transactions got VIP treatment, like getting the best table at a crowded restaurant.

Market Mayhem and a Muted Response

As word spread, the TRU token’s price did a swan dive, leaving many investors with holdings worth less than a subway token. Liquidity evaporated, and panic selling ensued. Truebit, for its part, acknowledged the