Alephium TokenBridge Drained of $815,000 in Seven-Minute Attack

Alephium's TokenBridge was compromised in a seven-minute attack that drained roughly $815,000 from the cross-chain bridge linking the Alephium network to Ethereum and BNB Chain. The attackers used forged messages to bypass the bridge's backend and mint over 13 million unbacked wrapped ALPH tokens.

The breach occurred on May 30, and security firm Blockaid first detected the attack. According to Alephium, the real cause of the breach was an off-chain bug in the bridge backend, not stolen guardian keys as initially thought.

Alephium has halted the bridge and pledged to repay affected users. The project has also urged holders to pull liquidity from ALPH pools and is weighing every option to make users whole.