$200k Worth of XRP Stolen via Software Flaw in Bridge Connecting XRP Ledger
A software flaw in a bridge connecting the XRP Ledger to the tx blockchain allowed an attacker to steal nearly $200,000 worth of XRP. The attacker exploited the vulnerability by creating fake deposits that were mistakenly registered as real, allowing them to withdraw unbacked bridged XRP from the bridge's reserve wallet.
The attacker then exchanged this unbacked XRP for genuine XRP, which quickly moved through multiple addresses. It remains unclear how affected holders will be compensated.
The operator of the bridge halted operations, fixed the vulnerability, and hired blockchain forensics experts to investigate. They also filed an FBI complaint in response to the attack.