Force Bridge User Compensation Plan Announcement

Dear Nervos Community,

We want to thank everyone for your patience and support following the recent Force Bridge security incident. We understand the distress this has caused, and we’re committed to making things right for our users.

:mag: What Happened

Earlier this month, a serious breach occurred due to the compromise of private keys. This resulted in unauthorized withdrawals of user funds bridged via Force Bridge. The incident was an internal exploit within Magickbase, not a vulnerability in Force Bridge’s smart contracts.

The suspect—who has been identified as one of the private key holders at Magickbase—acted alone and is now under investigation by local law enforcement in China.

:stop_sign: Force Bridge Status

Prior to the incident, we had already announced plans to sunset Force Bridge as part of a broader ecosystem upgrade. As a result, Force Bridge is no longer operational, and users should not rely on it for asset transfers going forward.

:moneybag: Compensation Plan

:page_facing_up: What Will Be Compensated

Users who held the following assets on Force Bridge will be eligible for reimbursement:

  • ETH
  • BNB
  • WBTC
  • DAI
  • USDT
  • USDC
  • BUSD
  • BSC-USD
  • BTCB

These reflect the same assets affected by the exploit.

:hammer_and_wrench: How to Claim Compensation

A dedicated claim portal will launch on July 16, where eligible users can:

  • Connect an ETH wallet
  • Burn their Force Bridge sUDT tokens following instructions
  • Specify the receiving address for reimbursement
  • Monitor their claim status and payment progress

Weekly snapshots of burn records will be taken, and payouts will be processed on a weekly basis.

:date: Timeline and Transparency

  • The compensation window will be open for 6 months (with extensions possible)
  • Payments will occur weekly, based on verified burn records
  • All burn and payment records will be made publicly available for full transparency
  • Final instructions and claim portal details will be published by July 16.

:pray: Our Commitment

We deeply regret the incident and accept full responsibility. Security failures within Magickbase allowed this exploit to happen, and we are actively working with legal authorities while making technical and governance changes to ensure this never happens again.

If you have any questions, please reach out to us via Discord.

Sincerely,
The Magickbase Team
June 28, 2025

7 Likes

It’s obvious lots of ‘hacks’ in crypto are inside jobs, but this usually gets swept under the rug, blamed on some imaginary guy in North Korea and is quickly forgotten about.

I didn’t have any funds in Forcebride, but just want to thank Magickbase for not sweeping this one under the rug, acknowledging that this was an internal security failure and making sure this thief might actually be held responsible for once. :pray:

5 Likes

Theft incidents will continue to occur in the bridge mode in the future, not your key not your money.