Attacker mints $1 billion Polkadot tokens on Ethereum, steals just $250,000
CoinDesk
An attacker exploited a bridge vulnerability to mint 1 billion Polkadot tokens on Ethereum but realized only $237,000 due to low liquidity.Summary
An attacker exploited a vulnerability in the Hyperbridge cross-chain gateway, which allowed them to forge a message that bypassed validation and granted them administrative control over bridged Polkadot tokens on Ethereum. Although the attacker successfully minted 1 billion tokens, the limited liquidity in the Uniswap pool resulted in a realized profit of only approximately $237,000. The exploit specifically targeted the bridge's contract rather than the Polkadot network itself, highlighting ongoing security risks associated with cross-chain bridges.
(Source：CoinDesk)