Taiko temporarily halted block production on its Ethereum layer-2 network after confirming that its chain-state verification mechanism had been compromised, putting every bridge deployed on the network under review.

The project told users that the security assumptions behind Taiko bridges could no longer be relied on and urged them to withdraw funds immediately. It also asked centralized exchanges to suspend TAIKO deposits until further notice while the team coordinated with its Security Council and ecosystem partners.

Security firm Blockaid said its initial analysis pointed to a flaw in Taiko bridge source-signal proof validation. In practical terms, crafted message proofs were accepted on Ethereum without matching legitimate events on the Taiko source chain. That let the attacker register fraudulent bridge messages and trigger unauthorized releases from the ERC20 vault.

Taiko later said the exploit had been contained and that withdrawals through the L1 Bridge and ERC20Vault had been fully stopped. CoinDesk reported that the team estimated losses at about $1.7 million before the pause, while Blockaid's earlier alert put the figure above $1 million.

The conservative read is that this was not a normal token-contract bug. It hit the verification layer that bridges depend on to decide whether cross-chain withdrawals are real. Taiko said it is preparing a full incident report, which should matter for users and other rollup teams because proof validation remains one of the highest-risk parts of cross-chain infrastructure.