XRPL Hack Update: TX Chain Bridge Halted After Nearly 200,000 XRP Exploit

TLDR

• TX Chain reported 198,715.88 XRP stolen from its XRPL bridge during the August 9 exploit.
• A deposit-detection flaw allowed transactions sent elsewhere to register as valid bridge deposits.
• The attacker minted unbacked XRP on TX Chain before withdrawing real XRP from the bridge reserve.
• The stolen XRP was converted to ETH, moved through THORChain and later transferred to Tornado Cash.
• TX Chain halted the XRPL bridge, fixed the vulnerable code and filed a complaint with the FBI.

The bridge connecting TX Chain and the XRP Ledger remains halted after an August 9 exploit drained nearly 200,000 XRP from its reserve wallet. The incident affected bridged XRP on TX Chain, while the XRP Ledger itself and other bridged assets were not compromised.

TX Chain said an attacker exploited a flaw in the bridge’s deposit-detection logic, allowing transactions that did not send XRP to the bridge to register as valid deposits. Those false deposits created unbacked XRP on TX Chain, which the attacker later exchanged for real XRP held in the bridge reserve.

… Continue reading the full article at the original source below.