Espresso Co-Founder Reports $30k Loss via Thirdweb Contract Error

Key Points:

• Espresso co-founder loses $30k due to Thirdweb contract vulnerability.
• Wallet was drained through a legacy bridge contract.
• Funds moved through Railgun for privacy protection.

Espresso co-founder Jill Gunter had $30k in USDC stolen via a vulnerability in a Thirdweb bridge contract. This incident stemmed from a legacy contract allowing unauthorized access, highlighting risks associated with outdated contract approvals.

In a recent event, Espresso Systems co-founder Jill Gunter announced the theft of $30k in USDC from her wallet due to a vulnerability in a Thirdweb bridge contract that was not sufficiently decommissioned.

Bridge Contract Vulnerability

The incident involved notable players like Thirdweb, a prominent Web3 infrastructure provider. Thirdweb confirmed the theft resulted from a legacy contract’s inadequacy, leading to the loss. All user wallets are now secure post-contract decommissioning.

Industry Concerns About Security

In response, the market’s focus has been on wallet security practices and the dangers of legacy systems. There have been calls for strengthened protocols to prevent similar occurrences in the future. The theft’s overall market impact remains minimal, attributed to its localized nature.

Past incidents highlight Thirdweb’s recurring security challenges. The service has faced criticism for prior disclosure practices. Security experts underscore the necessity of careful contract management to fend off unauthorized access across the ecosystem.

The $30k USDC loss highlights the enduring vulnerabilities in legacy contracts, spurred industry conversations on improving crypto infrastructure security protocols. Stakeholders continue to evaluate historical data to fortify systems against future breaches.