Long says fake RPC event logs led to Robinhood Chain bridge theft

Long, a launchpad project on Arc, said an investigation into a theft affecting funds on Robinhood Chain found that the attacker exploited the project’s RPC flow by sending forged withdrawal requests to the Long cross-chain bridge keeper. According to the project, the requests were made to appear as if they originated from Arc. Because the keeper did not have a mechanism to verify the authenticity of the data it received, it released nearly 47 ETH, which Long valued at about $118,000. Long said the shortfall in the bridge vault has already been fully covered using platform revenue, and that all user assets remain fully self-custodied on a 1:1 basis. The team also said it has fixed the vulnerability tied to the bridge and that the cross-chain bridge is now operating normally again. The disclosure was shared by Long in its own incident analysis.