XRP bridge drained for $200,000 after software mistook fake deposits for real ones
An attacker created unbacked XRP on another blockchain, then exchanged it for real XRP held in reserve. The bridge has been halted and its operator has filed a complaint with the FBI.
Make preferred on
Share this article
Summary
- Nearly 200,000 XRP, worth about $200,000, were drained from a bridge linking the XRP Ledger to the tx blockchain after an attacker exploited a software flaw.
- The bug let the bridge register non-existent deposits as real, issuing unbacked bridged XRP that the attacker then used to withdraw genuine XRP from the reserve wallet.
- Tx says it has halted the bridge, patched the vulnerability, hired blockchain forensics experts and filed an FBI complaint, but has not yet explained how affected holders will be compensated.
The project added it has identified and fixed the vulnerable code, engaged blockchain forensics specialists and filed a complaint with the FBI’s Internet Crime Complaint Center. It has not said how affected holders will be made whole.
Meanwhile, the stolen XRP did not stay put. Onchain tracking shows most of it moved onward within hours through several other addresses.
