Iron Fish Shuts Down Network Support After Massive Inflation Exploit

The exploit originated from a flaw in how the protocol calculated note nullifiers, a mechanism intended to prevent double-spending. By bypassing these safeguards, the attacker generated excess funds and drained them through the ChainPort bridge. Despite undergoing both internal and external security audits, the compromised code path remained undetected until anomalous activity involving wIRON on the Base network triggered an investigation. Iron Fish developers acknowledged the oversight, noting that the vulnerability existed within the scope of previous reviews.

Following the discovery, the team issued a patch and a postmortem before initiating the permanent shutdown of their development infrastructure. The market impact was immediate: liquidity for wIRON on the Base-based Aerodrome exchange evaporated, with market capitalization figures plummeting from approximately $200 million to less than $2,000. While the project provided no official estimate regarding the total value stolen, the collapse underscores the fragility of the bridge-reliant ecosystem. This incident marks a definitive end for the project, which had been integrated into Base’s privacy infrastructure following the team's acquisition by Coinbase in March 2025.