San FranciscoThree bridges were drained in 6 hours.
Attackers seized upgrade authority and bridge keys rather than breaking cryptography; BlockAid says the Verus-Ethereum bridge reused a bug it patched in May.
Security firms are still tracing the stolen funds across the three protocols.
Sources: CoinDesk