Coreum Bridge Attack Drains Nearly 200,000 XRP in Verification Flaw Exploit

A cross-chain bridge connecting XRP Ledger and Coreum was attacked on August 9, with the exploiter stealing about 199,916 XRP and reducing the bridge’s balance from roughly 200,410 XRP to 493.5 XRP. According to BlockBeats On-chain Detection, the incident was not aimed at XRP Ledger itself and did not involve a private key leak.The analysis said the attacker exploited a flaw in the bridge’s verification logic on the Coreum side. By forging fake deposit actions, the attacker caused the bridge system to treat them as legitimate deposits and trigger the bridge wallet on the other side to send real XRP.On-chain data showed the attacker moved the funds through 94 multisig-authorized transactions in 97 minutes. Those transfers required 17 signatures from 28 relay node keys, indicating that the attacker bypassed the bridge’s verification mechanism.As of August 11, the Coreum cross-chain bridge remained paused, and the Coreum Development Foundation had not released a formal incident report. The event affected third-party cross-chain infrastructure rather than the XRP Ledger protocol layer, and the XRP mainnet and user private keys were not impacted.