The Verus Ethereum Bridge lost about $7.54 million in a second exploit affecting the same contract family previously hit in May. Researchers said the attacker used the bridge’s import process to cause Ethereum-side payouts that were not matched by corresponding assets on the source side. The underlying issue is a bridge validation failure. Cross-chain systems must prove that value was actually locked, burned, or otherwise authorized on the origin chain before they release assets on the destination chain. If that linkage is weak or incomplete, the bridge can end up paying out on trust instead of verified state. Bridge operators should harden source-proof verification, add independent checks that reconcile locked and minted supply, and treat every import path as a high-risk code path. Repeated audits are especially important after any prior bridge incident, because a fix in one part of the workflow may leave a similar gap in another. For defense in depth, large withdrawals should be rate-limited and subject to additional validation before final settlement. Continuous monitoring of mint and burn balances across chains can also help detect unbacked issuance quickly enough to pause the system before losses spread.