Incident case
Rainbow Bridge August 2022 fabricated-block attack attempt
An attacker submitted a fabricated NEAR block to the Rainbow Bridge contract with a 5 ETH safe deposit. Automated watchdogs challenged the transaction in under approximately 31 seconds; no user funds were reported lost and the attacker forfeited the deposit.
reviewedcurrent
Incident facts
- Incident title
- Rainbow Bridge August 2022 fabricated-block attack attempt
- Bridge
- Rainbow Bridge
- Incident date
- 2022-08-20
- Incident type
- Attempted Exploit
- Major incident
- Yes
- Affected chains
- Ethereum, NEAR
- Affected assets
- ETH, Unknown
- Attack category
- Fabricated Light Client Block
- Reported loss
- No user-fund loss reported
- Recovery
- Not Required
- Reimbursement
- Not Applicable
- Restart
- Not Interrupted
- Current outcome
- Attack Thwarted
- Resolution
- Final outcome known
- Last reviewed
- 2026-06-15
- Last verified
- 2026-06-15
Timeline events
August fabricated-block attempt blocked automatically2022-08-20
Watchdogs challenged a fabricated NEAR block in under approximately 31 seconds; the attacker forfeited a 5 ETH safe deposit.
Evidence records
- Hackers Lose 5 Ether While Trying to Attack Near Protocol's Rainbow BridgeCoinDesk · Tier 2 · 2022-08-23
- Aurora Labs CEO account of the August Rainbow Bridge attack attemptAlex Shevchenko / Aurora Labs · Tier 1 · 2022-08-22
Known unknowns
- A dedicated long-form official postmortem was not located; the canonical account relies on the operator's public thread and contemporaneous reporting.