| Mobile Web

XRP 200,000 stolen in 97 minutes fuels debate over Coreum bridge security flaw

About 200,000 XRP was stolen from the Coreum cross-chain bridge after an attacker exploited weaknesses in its deposit verification logic, investigators said. The attacker allegedly made fake deposits appear real by moving bridge-issued wrapped tokens between wallets and inserting Coreum transfer details in transaction memos. Relayers checked that transactions occurred and memos existed, but did not confirm deposits reached the bridge address. A quorum of 17 signatures then approved withdrawals, sending XRP from the bridge wallet.