Incident case
Rainbow Bridge May 2022 fabricated-block attack attempt
An attacker attempted to submit a fabricated NEAR block to the Rainbow Bridge light client on Ethereum. A watchdog challenged the submission before funds could be released, and no bridge or user funds were reported lost.
reviewedcurrent
Incident facts
- Incident title
- Rainbow Bridge May 2022 fabricated-block attack attempt
- Bridge
- Rainbow Bridge
- Incident date
- 2022-05-01
- Incident type
- Attempted Exploit
- Major incident
- Yes
- Affected chains
- Ethereum, NEAR
- Affected assets
- ETH, Unknown
- Attack category
- Fabricated Light Client Block
- Reported loss
- No user-fund loss reported
- Recovery
- Not Required
- Reimbursement
- Not Applicable
- Restart
- Not Interrupted
- Current outcome
- Attack Thwarted
- Resolution
- Final outcome known
- Last reviewed
- 2026-06-15
- Last verified
- 2026-06-15
Timeline events
May fabricated-block attempt challenged2022-05-01
A watchdog challenged a fabricated NEAR block before funds could be released; the attacker forfeited a 2.5 ETH bond.
Evidence records
- Failed attack on NEAR Protocol Rainbow Bridge cost attacker 2.5 ETHBeInCrypto · Tier 2 · 2022-05-02
- Aurora Labs CEO account of the May Rainbow Bridge attack attemptAlex Shevchenko / Aurora Labs · Tier 1 · 2022-05-01
Known unknowns
- A dedicated long-form official postmortem was not located; the canonical account relies on the operator's public thread and contemporaneous reporting.