cross-chain

On August 9, the cross-chain bridge connecting the XRP Ledger and Coreum was attacked, with the attacker stealing approximately 199,900 XRP through a validation logic vulnerability, causing the bridged asset balance to drop from about 200,400 XRP to 493.5 XRP. This attack did not involve private key leakage and did not target the XRP Ledger protocol itself.The attacker forged deposit operations, causing the bridging system to recognize them as real deposits and triggering the other end of the bridging wallet to send real XRP to them. On-chain data shows that the attacker completed the fund transfer through 94 multi-signature authorization transactions within 97 minutes. These transactions required 17 signatures from 28 relay node keys, allowing the attacker to bypass the validation mechanism of the bridging system. As of August 11, the Coreum cross-chain bridge remains in a suspended state, and the Coreum Development Foundation has not yet released an official incident report. The security of the XRP mainnet and user private keys has not been affected.

Oraichain stated that yesterday's incident originated from a vulnerability in the EVM cross-chain transfer path, which led to the unauthorized minting of ORAI. Since August 9 at 04:00 UTC, the network has been suspended, and the bridging contracts, cross-chain paths, and public interfaces have also been restricted.The related vulnerability path has been identified and addressed, and the associated fund transfer paths have been restricted. The team is working with partners and centralized exchanges to limit further fund movement and protect affected assets. Investigations and account reconciliations are still ongoing, and the team is preparing to restore the standard supply of ORAI, including the destruction of unauthorized minted balances and reconciling and fixing the affected protocol states.

CertiK stated that its monitoring system detected two transactions of 200 ETH each being transferred to Tornado Cash, and the related funds are associated with the ongoing Coldcard Wallet attack incident.The aforementioned funds were previously transferred from BTC to an Ethereum address via THORChain, and then subsequently transferred to Tornado Cash.

According to CoinDesk, cryptocurrency infrastructure company BitGo will replace LayerZero with Chainlink CCIP as the exclusive cross-chain service provider for $7.3 billion WBTC.After the $292 million cross-chain bridge exploit incident at Kelp, multiple projects announced their migration from LayerZero to Chainlink, with a disclosed total migration scale reaching $14.5 billion. BitGo will use CCIP for future assets while retaining control over token contracts, rate limits, and transfer settings.

Binance Wallet officially announced that Binance Alpha will be the first platform to launch the cross-chain protocol Squid (QUID), with the launch date set for August 4. After trading opens, eligible users can use Binance Alpha points to claim airdrops on the Alpha event page, with more details to be announced later.It is reported that Squid is a cross-chain platform that supports access to over 20,000 tokens across more than 100 blockchains and has processed over $6 billion in transaction volume, with QUID as its native token.

Gate Research Institute released a thematic report on Robinhood Chain. The report points out that Robinhood Chain aims for tokenized stocks, ETFs, and other RWAs as its long-term direction, but in the early stages of the mainnet launch, growth is primarily driven by Meme, Launchpad, and Uniswap trading, forming a structure where RWA serves as a long-term asset endpoint and Meme acts as a short-term liquidity engine. The high turnover of popular tokens such as CASHCAT and PONS reflects that the market is pricing around the Robinhood brand, on-chain retail trading culture, and launch platform traffic.The report also believes that Gate DEX's comprehensive access to Robinhood Chain supplements the ecosystem's external multi-chain entry points. In the early development stage of Robinhood Chain, AMMs like Uniswap mainly undertake price discovery and liquidity formation for on-chain assets, while Gate DEX complements the inflow paths for external funds and users through asset discovery, trading entry, and cross-chain capabilities. Gate Alpha supports the discovery and trading of ecosystem assets and multiple launch platforms, while Gate Wallet, Swap, professional trading, and market modules simultaneously cover this network; relying on Across and LayerZero, users can conduct cross-chain exchanges between BSC, Ethereum, Base, and Robinhood Chain. Overall, Gate DEX mainly undertakes asset distribution and fund routing functions within the ecosystem, helping Robinhood Chain connect with a broader multi-chain user base by lowering the operational threshold for users to discover assets, enter cross-chain, and participate in trading.

The stablecoin infrastructure company Brale has launched the ION Protocol, an interoperability system that allows participants to transfer stablecoins across blockchains by destroying tokens on one chain and minting tokens on another chain. The ION Protocol is now live on the testnet.Currently, there are over 350 types of stablecoins in the market, with a total market capitalization exceeding $300 billion, and market growth is accompanied by fragmented liquidity. Brale stated that, unlike traditional blockchain bridges that rely on pre-funded liquidity pools, ION aims to reduce capital requirements and address liquidity bottlenecks in the scaling of custom stablecoins.

According to CertiK Alert monitoring, VerusCoin's Ethereum cross-chain bridge experienced a security incident, with approximately $7.53 million in assets being transferred out.Preliminary analysis indicates that this issue may be related to the cross-chain bridge not adequately verifying whether the Verus chain-side input supports the paid amount, similar to the incident that occurred in May of this year.

According to Blockaid's monitoring, the Arbitrum ecosystem protocol AFX was attacked at 5:30 AM Beijing time, targeting a cross-chain bridge operated by the protocol. So far, approximately 24.15 million USDC has been stolen. Blockaid stated that it is working with the Arbitrum team to respond to the incident, communicate with the affected protocols, and assist in freezing the stolen funds.In addition, Offchain Labs co-founder Steven Goldfeder responded on the X platform, stating that the Arbitrum team has noted the reports of the cross-chain bridge attack on Arbitrum and is investigating. Goldfeder confirmed that the related transactions originated from a third-party protocol, and the Arbitrum native bridge was not attacked or exploited. The team will coordinate with the third-party team and provide more details.

After completing a rigorous and comprehensive security review, United Stables officially announced the adoption of Chainlink as the official data and cross-chain infrastructure driving the U stablecoin.

On-chain detective ZachXBT stated that the cross-chain protocol TeleSwap suffered a vulnerability attack of approximately $735,000 on July 15, and after the incident, its Bitcoin hot wallet immediately stopped processing transactions.As of now, five days have passed since the incident, and the project team has not made any public disclosures regarding this event. ZachXBT noted that about two hours ago, the attacker transferred the stolen funds to Tornado Cash.

According to Decrypt, the cross-chain bridge protocol Allbridge has suspended its Core protocol due to a flash loan attack, with the attacker having stolen approximately $1.65 million in assets from the Solana stablecoin liquidity pool.According to analysis by blockchain security firms PeckShield and CertiK, the attacker borrowed $1.12 million in flash loan funds through the Solana lending protocol Kamino, and then manipulated the price mechanism within the Allbridge pool through multiple stablecoin exchange operations to exchange assets at a low price, subsequently transferring the funds across chains to an Ethereum address.During the attack, the attacker exchanged several thousand dollars in USDT to obtain approximately $2.24 million in USDC, and then bridged the funds to Ethereum for further dispersal. It is currently unclear whether some of the funds can still be recovered.Allbridge stated that the team has suspended the Core protocol for security reasons and has requested affected liquidity providers to withdraw their funds immediately. Due to the attack causing an imbalance in the liquidity pool, some traders profited from arbitrage opportunities. Allbridge has called on relevant users to return their profits, stating that the funds will be used to compensate affected LPs.The team indicated that there is no further risk to user funds at this time and will release a detailed incident analysis report after completing the investigation, while also planning to relaunch the Core protocol after removing the liquidity pool. This is the second time Allbridge has encountered a similar flash loan attack. In April 2023, the protocol's BNB Chain liquidity pool suffered a loss of approximately $573,000 due to a similar vulnerability, after which the project team stated that they had recovered most of the funds and adjusted the liquidity calculation mechanism.

The cross-chain bridge protocol Allbridge Core has experienced a security incident. The official team has suspended the protocol for investigation and advised users holding affected liquidity pools (LPs) to withdraw their funds immediately.This security incident has led to an imbalance in the liquidity pools, creating temporary arbitrage opportunities. The official team calls on arbitrage users to return the funds to compensate the affected liquidity providers (LPs). According to monitoring by Onchain Lens, Allbridge Core's losses have exceeded $1.1 million.

According to monitoring by Specter, an executor wallet of LayerZero is suspected to have been hacked, resulting in a total loss of approximately $2.1 million in assets across multiple blockchain networks.The attackers then transferred the stolen funds across chains to Ethereum via Stargate and Relay.

Aave announced that it has selected Chainlink CCIP as its cross-chain infrastructure standard. CCIP is currently delivering infrastructure a.DI through Aave to undertake cross-chain GHO transfers and multi-chain governance execution.Subsequently, cross-chain logic for the Aave App will be supported through Stable Vaults, covering scenarios such as vault rebalancing, yield optimization, deposits, and transfers. Relevant cross-chain operations will take place between Ethereum, Base, and Arbitrum.

According to The Block, a global anti-fraud operation led by INTERPOL has arrested over 5,800 suspects and successfully uncovered a cryptocurrency money laundering network that used cross-chain token exchange methods to conceal illegal fund flows.One suspect's digital wallet processed over $122.5 million in funds in just 10 months. On-chain analysts pointed out that while cross-chain operations increase tracking difficulty, it does not mean that fund flows cannot be traced. Such cases indicate that financial crimes continue to evolve alongside the advancement of blockchain technology.

The cross-chain protocol Wormhole announced that the Moonbeam network will officially shut down on July 31, 2026. Moonbeam will maintain the operation of the parachain during the transition period, but after July 31, the chain will cease operations.Wormhole pointed out that after this date, contributors to Portal and Wormhole will not be able to assist in recovering any assets stored on that chain. Wormhole recommends that users transfer external assets across chains through official Moonbeam channels before the deadline. Previously, Moonbeam announced a complete exit from the Polkadot ecosystem and will migrate the GLMR token 1:1 to the Base network.

Sun Yuchen posted on platform X: "The BitTorrent team has informed me that they have completed the BTTC Bridge Sunset Program. In the future, the BitTorrent team will focus more on decentralized AI and the maintenance of the BitTorrent decentralized protocol. All funds are safe, and users can continue to deposit and withdraw funds from the BTTC Bridge through partnered centralized exchanges."

On-chain detective ZachXBT disclosed on his personal channel that a hacker extracted approximately 3,200 ETH through Tornado Cash between July 2 and 3. The funds are related to two private key leakage incidents. The address subsequently used Circle's CCTP cross-chain bridge to launder approximately $5,500,000 in assets across chains and further transferred USDC to seven deposit addresses on the Arbitrum network.ZachXBT pointed out that the flow of funds exhibits a typical decentralized money laundering path, utilizing mixing tools and cross-chain infrastructure to reduce tracking difficulty. Currently, the related on-chain assets are still in circulation.