Bridge Incident Registry
Bridge entity

Rainbow Bridge

Rainbow Bridge is the trustless, permissionless canonical bridge connecting Ethereum, NEAR, and Aurora. It is included because fabricated-block attacks in May and August 2022 were challenged before user funds were lost, and because official disclosures document additional critical vulnerabilities, a security pause during Ethereum's Merge, and subsequent reactivation.

active reviewed current

Bridge facts

Canonical name
Rainbow Bridge
Type
Canonical Bridge
Status
Active
Confidence
High
Primary chains
Ethereum, NEAR, Aurora
Primary assets
ETH, USDC, USDT, DAI, WBTC, Unknown
Operator
Aurora Labs
Ecosystem
NEAR / Aurora
Launch date
2021-03-15
End date
Unknown
Terminal reason
Not applicable / unknown
Last reviewed
2026-06-15
Last verified
2026-06-15

Incident cases

  • Rainbow Bridge August 2022 fabricated-block attack attempt2022-08-20

    An attacker submitted a fabricated NEAR block to the Rainbow Bridge contract with a 5 ETH safe deposit. Automated watchdogs challenged the transaction in under approximately 31 seconds; no user funds were reported lost and the attacker forfeited the deposit.

    Attempted ExploitNo user-fund loss reportedFinal outcome known

  • Rainbow Bridge May 2022 fabricated-block attack attempt2022-05-01

    An attacker attempted to submit a fabricated NEAR block to the Rainbow Bridge light client on Ethereum. A watchdog challenged the submission before funds could be released, and no bridge or user funds were reported lost.

    Attempted ExploitNo user-fund loss reportedFinal outcome known

Evidence records

Official URL status

Official URL recorded as live: https://rainbowbridge.app/