199,900 XRP stolen in Coreum cross-chain bridge attack

Odaily Planet Daily reports that on August 9, a cross-chain bridge connecting the XRP Ledger and Coreum was attacked. The attacker exploited a vulnerability in the verification logic to steal approximately 199,900 XRP, reducing the bridge’s asset balance from around 200,400 XRP to just 493.5 XRP. The attack did not involve any private key compromise or target the XRP Ledger protocol itself. The attacker forged deposit transactions, causing the bridge system to recognize them as legitimate deposits and triggering the corresponding bridge wallet on the other end to send real XRP to the attacker. On-chain data shows that the attacker transferred funds within 97 minutes through 94 multi-signature authorized transactions. These transactions required signatures from 17 out of 28 relay node keys, allowing the attacker to bypass the bridge’s verification mechanism. As of August 11, the Coreum cross-chain bridge remains suspended, and the Coreum Development Foundation has not yet released an official incident report. The XRP mainnet and user private keys remain unaffected.