On September 26, 2024, a former employee planted malware in Bedrock's Cargo.toml file, providing persistent access for three weeks through IDE execution. The attacker then exploited a flaw in the uniBTC minting mechanism that allowed arbitrary minting against ETH, draining $1.7M-$2M from the liquidity pool.