Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP XRP attracted attention this time not because of price fluctuations, but because of a security breach in the bridge between the XRP ledger (XRPL) and the tx network. The attacker took advantage of the system's mechanism to mistake certain transactions for valid deposits, created unsecured bridge XRP without actually depositing the XRP, and extracted some of the real assets from the bridge reserves. According to the tx team, the attack occurred on August 9. After the incident, the bridge between XRPL and tx has been suspended and the team has begun to fix the code that caused the vulnerability.
How is the bridging vulnerability exploited?
The root cause of theattack was a critical software error in the mechanism used to bridge the verification of Ripple deposits. The system records certain transactions as successful deposits without actually sending XRP to the bridge address on the XRPL. An attacker exploited this vulnerability to create bridging XRP balances on the tx network that were not supported by real XRP reserves, and then used these unsecured balances to extract the real XRP in the bridging reserves. This incident once again highlights the importance of properly verifying assets in blockchain-based bridges. Bridging When enabling asset transfers between two different networks, it is necessary to ensure a reliable correspondence between the real reserves on one side and the tokens created on the other side.
About 200,000 XRP was stolen
According to preliminary information released by tx, the attacker stole approximately 200,000 XRP, worth approximately 200,000 US dollars. The impact of the attack is limited to the bridging Ripple on the tx chain. However, it was pointed out that the number of bridged Ripples in circulation after the attack was not entirely supported one-on-one by real Ripple reserves. In contrast, other bridging assets are fully collateralized. The statement emphasized that centralized cryptocurrency exchanges, decentralized exchanges or other tokens and user funds directly present on the blockchain were not affected by the attack. Therefore, the incident was not an attack on the entire Ripple ecosystem, but rather a vulnerability in a specific bridging software infrastructure was exploited.
Why did security audits fail to prevent the vulnerability?
The tx team stated that the bridge had passed multiple safety audits within the company and third-party organizations before it was put into use. Despite this, the attacker successfully exploited security vulnerabilities that were not discovered in previous audits. After the attack was discovered, the team made necessary repairs to the code that caused the vulnerability and suspended bridge operations. In addition, the team has begun to work with blockchain forensic analysis companies to track the flow of stolen funds on different blockchain networks. This incident demonstrates that in digital asset infrastructure, auditing alone is not enough, especially the need to continuously monitor transaction verification mechanisms in bridges.
How to make up for the loss of users?
TX management said it is evaluating various options to compensate for the losses of affected users, but the specific content of the compensation mechanism and implementation timetable have not yet been announced. The company also formally filed a complaint with the FBI's Internet Crime Complaint Center, along with relevant transaction records and information that may help identify the attacker. TX said it would use all available legal channels to track down and prosecute the attacker. Currently, the bridge between Ripple and tx will remain closed until a security review and system hardening is completed.
This content in no way constitutes investment advice. There are high risks in the market, so please study it yourself before making an investment decision.
