According to U.Today, the Coreum cross-chain bridge has been exploited, with roughly 200,000 XRP drained in the incident. The attack lasted about 97 minutes. The hacker forged deposit transaction records and abused a verification logic flaw in the bridge contract, tricking validators into signing malicious transactions that moved funds out of the protocol. The vulnerability was rooted in the validators' failure to verify recipient addresses. TX, the team operating the bridge, has yet to publish an official post-mortem analysis. Bridge services remain suspended. The team behind Coreum previously ran the Sologenic project, and a brand merger was finalized in March this year. The initial report came from U.Today.
The Coreum cross-chain bridge has been hit by an exploit that drained roughly 200,000 XRP, according to U.Today. The attack spanned 97 minutes. TX, the team operating the bridge, has not yet released an official post-mortem.
How the attack worked
The attacker forged deposit transaction records to exploit a flaw in the bridge contract's verification logic. That flaw let the hacker trick validators into signing malicious transactions, moving funds out. At the core of the incident was a missing check: validators did not verify the recipient address before signing.
Status and background
The bridge service remains suspended. Coreum's team is the former Sologenic project, which completed a brand merger in March this year.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
