Saga Halts EVM Chain After Hack Drains $7M in USDC, ETH and tBTC

TLDR

• Saga halts SagaEVM after a $7M exploit, launching urgent forensic and security actions.
• Coordinated attack drained assets to Ethereum, forcing immediate chainlet shutdown.
• Engineers lock systems, trace flows, and reinforce cross-chain safeguards.
• Network integrity holds as Saga isolates damage and begins full remediation.
• Post-mortem report promised after fixes, audits, and security upgrades are complete.

Saga halted its SagaEVM chain after a security breach moved nearly seven million dollars in assets to Ethereum, and the project initiated a full investigation. The team paused the chain at block height 6,593,800 and began tracing the coordinated activity that triggered the exploit. Saga now works to contain the impact, strengthen core systems and confirm the sequence that enabled the transfers.

The incident disrupted the affected chainlet, yet Saga maintained stability across its broader network as operations continued elsewhere. Engineers activated forensic processes and restricted related activity to prevent further damage. Saga will share confirmed updates as the investigation progresses.

The breach unfolded during a period of elevated security incidents across multiple blockchains and Saga now aims to address the root cause. The project plans to publish a technical report once remediation is complete. Saga emphasized that the chain will not resume until all systems are reinforced.

SagaEVM Chain Paused After Coordinated Exploit

Saga identified precise contract deployments that enabled the attack, and it responded by halting SagaEVM to stop additional movement. The team locked activity because the breach involved rapid cross-chain flows that required immediate control. Saga continues to analyze execution traces to outline each step of the exploit.

The affected chainlet includes SagaEVM along with Colt and Mustang, and these environments remain offline during the review. Saga confirmed that the impact did not reach the SSC mainnet or its protocol consensus. The broader Saga network therefore remains functional as analysis continues.

The exploit moved USDC, yUSD, ETH, and tBTC toward Ethereum through a structured withdrawal pattern. Saga identified the receiving wallet and initiated coordination with exchanges to block further activity. The team also works with bridge operators to support containment efforts.

Saga Confirms Network Integrity and Begins Mitigation

Saga stated that no validator keys, consensus processes or signer systems were compromised during the breach. The project noted that all critical layers continue to operate normally across chainlets not tied to the incident. Saga stresses that structural components remain intact despite the localized impact.

Mitigation now focuses on patching weaknesses in deployment flows and reinforcing cross-chain safeguards. Saga introduced additional protective steps to block similar patterns while confirming the full scope of affected transactions. Engineering teams continue reviewing archive data to validate all findings.

Saga plans structured coordination with partners to support recovery and ensure the network returns in a secure state. The paused chain will remain offline until all risks are addressed and all fixes tested. Saga aims to complete remediation before restoring operations.

Context: Rising Crypto Exploits Pressure Chain Security

The Saga breach follows a period marked by increasing smart contract attacks across several networks. These events highlight the rising complexity of cross-chain systems, and Saga now targets improvements to reduce exposure. The industry recorded widespread theft in 2025, which reinforced concerns about operational resilience.

Saga’s response aligns with broader efforts to strengthen chain security across decentralized ecosystems. Projects continue refining detection tools while adapting to evolving attack patterns. Saga seeks to contribute to this shift by releasing a transparent account of the event.

The team will publish a full post-mortem once all data is verified and systems are hardened. Saga intends to outline technical details, remediation steps, and long-term protections in the final report. The project says updates will continue as confirmed information becomes available.

The post Saga Halts EVM Chain After Hack Drains $7M in USDC, ETH and tBTC appeared first on CoinCentral.