Coreum's cross-chain bridge lost nearly 200,000 XRP—valued at $202,000 at XRP's current price of $1.01—after an attacker exploited a critical flaw in the bridge's deposit verification mechanism. The bug allowed the attacker to mint fake XRP balances on the Coreum side of the bridge and use them to trigger real withdrawals from the bridge's actual XRP reserves.
On-chain data confirms no private keys were compromised. This was a logic exploit. The flaw let the attacker mint XRP tokens inside the bridge's internal ledger without a corresponding deposit on the native XRP Ledger, creating the appearance of legitimate deposits. The bridge's smart contract then honored withdrawal requests against those fabricated balances—draining real funds from real reserves.
The drained amount won't move XRP's market cap or price, but the damage to Coreum's reputation as a secure layer-one blockchain is real. Bridges remain the softest target in multi-chain infrastructure, and this exploit is another data point that institutional capital evaluating blockchain rails cannot ignore. Rigorous audits and tighter verification logic aren't optional—they're the cost of operating in this space.
