Morning Edition · Wednesday, August 12, 2026Published at 1:36 AM EDT · New York
The attacker moved the bridge's own token between two wallets he controlled with a deposit label attached, then withdrew real XRP through the normal path over 97 minutes.

An attacker drained 199,916.3 XRP from the Coreum cross-chain bridge on August 9, in a failure of deposit verification rather than of cryptography. The attacker sent the bridge's own token between two wallets he controlled and attached a la…
Track on-chain flows, protocol shifts, stablecoins, and regulation.
The Global Intelligence Brief stays free.
Part of a tracked trend
Losses Move to Components That Worked as Designed
A growing share of DeFi losses will come not from buggy contract code but from components behaving exactly as specified — oracle forwarders, validator signature sets, governance votes and other trusted off-contract inputs — so audits and bug bounties scoped to on-chain code keep missing the failure surface, and protocols will be repeatedly forced to extend review, scope and monitoring to their privileged operational infrastructure.
Start a discussion in Townsquare.
More from this edition
Comments
0No comments yet.