Coreum cross-chain bridge attacked, nearly 200,000 XRP stolen

On August 9, the cross-chain bridge connecting the XRP Ledger and Coreum was attacked, with the attacker stealing approximately 199,900 XRP through a validation logic vulnerability, causing the bridged asset balance to drop from about 200,400 XRP to 493.5 XRP. This attack did not involve private key leakage and did not target the XRP Ledger protocol itself.

The attacker forged deposit operations, causing the bridging system to recognize them as real deposits and triggering the other end of the bridging wallet to send real XRP to them. On-chain data shows that the attacker completed the fund transfer through 94 multi-signature authorization transactions within 97 minutes. These transactions required 17 signatures from 28 relay node keys, allowing the attacker to bypass the validation mechanism of the bridging system. As of August 11, the Coreum cross-chain bridge remains in a suspended state, and the Coreum Development Foundation has not yet released an official incident report. The security of the XRP mainnet and user private keys has not been affected.