Bedrock DeFi, a decentralized finance protocol, has suffered a significant security breach resulting in the loss of approximately $2 million. The exploit, which occurred on September 26, 2024, involved the minting function of Bedrock's uniBTC token. The attacker was able to swap 30.8 ETH for uniBTC at a 1:1 exchange rate due to a vulnerability in the smart contract. The funds were funneled through TornadoCash, and 650 ETH, worth around $1.7 million, is currently held in the attacker's address. In a surprising move, Bedrock has offered the hacker a job to help strengthen their security measures. Additionally, Bedrock reassured users that the underlying wrapped BTC and BTC in reserves are safe.