Alephium TokenBridge Breach Results in $815K Loss Due to Off-Chain Flaw

A cross-chain bridge connecting Alephium (ALPH) to Ethereum (ETH) and BNB Chain was breached, resulting in the loss of approximately $815,000.

The attack occurred on May 30th, with attackers forcing forged messages through the TokenBridge's backend. This enabled them to drain reserves, mint new tokens, and accumulate a total haul worth over $815,000.

Alephium has attributed the breach to an off-chain flaw in its bridge's backend rather than stolen guardian keys, as initially suspected. The project runs on a private fork of the Wormhole messaging system with only four signers, raising concerns about potential vulnerabilities in similar codebases.