Bedrock's uniBTC vault contract on Ethereum treated deposits of native ETH as if they were BTC at a 1:1 ratio. An attacker used a 30.8 WETH flash loan to mint 30.8 uniBTC and sold the uniBTC into DEX liquidity pools
3. Estimated losses were about $1.7 million (Verichains) to $2 million (Bedrock-cited reporting), mostly from those pools. Bedrock said the underlying wrapped BTC and BTC reserves were not affected and that a reimbursement plan and post-mortem would follow
2. In June 2025 security firm Fuzzland said a former employee of Fuzzland was behind the attack and that Fuzzland had compensated Bedrock. These are Fuzzland's claims, reported without independent verification
4.
- Outcome
- No confirmed recovery. No public Bedrock confirmation of completed user reimbursement was found as of October 23, 2026.
- Loss
- ~$1.7M–$2M
- Recovered or reimbursed
- Fuzzland reports compensating Bedrock (amount not published)