Taiko Network Hit for Over $1.7M After Raiko SGX Signing Key Exposed on GitHub

June 22 — BlockSec monitoring shows the Taiko network was attacked, with losses exceeding $1.7 million. Early findings point to a GitHub exposure of Raiko SGX enclave signing keys as the likely trigger. Raiko is Taiko's multiprover stack used to generate proofs for Taiko and Ethereum blocks. As a result, leaked Raiko SGX enclave keys could directly undermine Taiko's onchain proof-verification path. With the enclave signing key publicly accessible, the SGX attestation trust model may have been compromised. The leaked key could enable an attacker to register SGX instances they control. Those instances could then sign proof public inputs accepted by Taiko's proof verifier, allowing fraudulent state or signaling proofs to pass. The attacker would then register fake source signals as RETRIABLE and call retryMessage, prompting the ERC20Vault to release canonical L1 assets.