On Aug. 9, an exploit hit the cross-chain bridge connecting XRP Ledger and Coreum, allowing the attacker to steal roughly 199,900 XRP through a validation logic flaw, according to ChainCatcher. On-chain data shows the bridge's asset balance dropped from about 200,400 XRP before the attack to 493.5 XRP afterward. The incident did not involve a private key leak and did not target the XRP Ledger protocol itself. The attacker forged deposit operations, tricking the bridge system into recognizing them as legitimate deposits. That, in turn, triggered the bridge wallet on the other end to send real XRP. The funds were moved out in 94 multi-signature authorization transactions over a 97-minute window. Each transaction required signatures from 17 of the 28 relay node keys, allowing the attacker to bypass the bridge's verification mechanism. As of Aug. 11, the Coreum bridge remained suspended, and the Coreum development foundation had not yet issued an official incident report. The XRP mainnet and user private keys stayed safe.
A cross-chain bridge connecting XRP Ledger and Coreum was exploited on Aug. 9. The attacker drained roughly 199,900 XRP through a flaw in the bridge's validation logic, according to ChainCatcher.
On-chain data shows the bridge's asset balance fell from about 200,400 XRP to 493.5 XRP. The attack did not involve a private key leak and did not target the XRP Ledger protocol itself. Instead, the attacker forged deposit operations, tricking the bridge system into treating them as genuine deposits. That triggered the bridge wallet on the other end to send out real XRP.
The stolen funds moved through 94 multi-signature authorization transactions in 97 minutes. Each of those transactions required signatures from 17 of the 28 relay node keys, enough for the attacker to bypass the bridge's verification mechanism.
As of Aug. 11, the Coreum bridge remained suspended. The Coreum development foundation has not published a formal incident report. The XRP mainnet and user private keys were not affected.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
