XRP Bridge Hacked for $200K in 97-Minute Attack
Nearly 200,000 XRP were stolen from the Coreum XRPL bridge in an attack that lasted just 97 minutes on August 9. The attacker exploited a flaw in the bridge's relayer logic, which misinterpreted internal wallet transfers as deposits and allowed unauthorized withdrawals.
The issue stemmed from the bridge software failing to verify payment destinations properly. This meant that the XRP Ledger itself was not compromised, but rather the bridge's design led to the breach.
The stolen XRP quickly moved through several wallets, with the bridge remaining halted pending a formal incident report and fixes to prevent future breaches.