BlockSec: Taiko Suspected Victim of Attack Due to GitHub Leak of SGX Attestation Key, Loses Over $1.7 Million

June 22nd – According to BlockSec’s monitoring, the Taiko Network has suffered an attack leading to over $1.7 million in losses. Preliminary investigations point to the likely root cause: the exposure of Raiko’s SGX enclave signing key on GitHub. Raiko is Taiko’s multi-prover stack, used for verifying blocks on both Taiko and Ethereum, so the exposed SGX enclave key could directly compromise Taiko’s on-chain proof verification pathway. With the enclave signing key now publicly accessible, the SGX prover trust model may have been breached. The exposed key enables attackers to register SGX instances under their control. Once registered, these malicious instances can sign proof public inputs accepted by Taiko’s proof validator, allowing fraudulent state or signal proofs to pass validation. The attacker then leverages forged source signals to register fake bridging messages as "RETRIABLE", before calling the `retryMessage` function to trigger the ERC20Vault and release standard Layer 1 (L1) assets.