Alephium's TokenBridge Hit by $815K Attack via Off-Chain Flaw
Alephium's TokenBridge was drained of over $815,000 in a seven-minute attack, prompting the project to halt the bridge and pledge to repay affected users.
The attackers exploited an off-chain backend flaw, minting 13.76 million unbacked wrapped ALPH tokens with no real ALPH locked behind them.
This breach is the latest in a series of high-profile attacks on cross-chain bridges, which are vulnerable to forged message tactics that allow hackers to drain funds and mint new tokens.