XRP Bridge Compromised in Sophisticated Attack Draining 200,000 Tokens

A cross-chain bridge between the XRP Ledger and Coreum's chain was compromised in an attack that lasted just 97 minutes, draining approximately 200,000 XRP.

The issue lay in the bridge's verification logic, which failed to confirm whether a deposit payment had actually reached the bridge. As a result, attackers could move money between their own accounts and label these moves as deposits, collecting real XRP payments from the system.

Each transfer required approval from a group of relayers, but 17 out of 28 signatures were used per payment to legitimize the false evidence. The bridge's users were unaware that this was happening, making it a sophisticated attack.

Fortunately, no private keys were stolen and the XRP Ledger's core protocols remained unaltered. Coreum halted the bridge pending repairs, but an official post-mortem report has not yet been released.