Data compiled by Woofun AI shows that Taiko Network suffered a security breach resulting in losses exceeding $1.7 million. Preliminary investigations identify the root cause as the inadvertent exposure of the Raiko SGX enclave signing key on GitHub. Raiko serves as the multi-prover stack for Taiko and Ethereum blocks, meaning the compromised key directly undermined the on-chain proof verification path.

The public accessibility of the enclave signing key allowed an attacker to register malicious SGX instances. These instances signed fraudulent state and signal proofs that passed Taiko's validator checks. Consequently, the attacker registered fake bridging messages as RETRIABLE and executed retryMessage calls, triggering the ERC20Vault to release standardized L1 assets.