XRP Ledger Bridge Drained of Nearly $200,000 in Crypto Heist
An XRP Ledger bridge was drained of nearly $202,000 worth of cryptocurrency after an attacker exploited a flaw in its deposit-detection software. The Tx XRPL bridge allowed transactions that didn't actually deliver XRP to be treated as deposits, enabling the hacker to create unbacked tokens on the Tx Chain.
The bridge's relayers mistakenly authorized 94 payments totaling around 199,916 XRP over a period of 97 minutes. These payments were then used to withdraw the resulting balances through the bridge's normal process.
Tx halted the bridge and is evaluating options for compensating affected users, who are advised not to take any action or respond to claims that can recover their funds. The company has filed a complaint with the FBI's Internet Crime Complaint Center and hired blockchain forensics specialists.