XRPL Bridge Compromised for Nearly $200,000 in Latest Cross-Chain Security Breach

A recent attack on the Coreum XRPL bridge has resulted in a loss of nearly $200,000 in XRP. The breach occurred on August 9, 2026, when an attacker exploited a flaw in the bridge's deposit verification software.

The bridge had held approximately 200,410 XRP before the attack, with its balance falling to about 493.5 XRP after the incident. The attacker did not send genuine XRP deposits to the bridge but instead transferred the bridge's own token between wallets while attaching information that made the transactions appear to be deposits.

The bridge's software incorrectly interpreted those transactions as legitimate incoming XRP and credited the attacker with funds that had never been deposited. This allowed the attacker to withdraw real XRP from the bridge, which was subsequently moved through other wallets.

The incident highlights a persistent weakness in cross-chain infrastructure: bridges must independently verify that assets have actually been deposited before releasing funds on another network. A failure in this verification layer can allow attackers to create artificial balances without compromising the underlying blockchain.