XRP bridge exploit update: tx identifies flaw, alerts FBI

Tx said on Aug. 12 that its XRPL bridge was exploited on Aug. 9 after an attacker abused faulty deposit detection logic, draining XRP from the bridge reserve. Summary Tx says attackers stole 198,715.88 XRP after exploiting a flaw in bridge deposit verification logic. The XRPL bridge remains halted while developers review security upgrades and possible user remedy options. Attackers converted stolen XRP into ETH before routing funds through THORChain and Tornado Cash afterward. Tx filed an FBI IC3 complaint with transaction records and additional identifying information about attackers. Other bridged assets remain fully backed, while bridged XRP currently lacks complete reserve backing. Technical lead Reza Bashash put the stolen amount at 198,715.88 XRP. The bridge remains halted while the team evaluates recovery options and strengthens the affected software, according to its latest post. The company said the flaw caused transactions that never delivered XRP to the bridge to be registered as deposits. This allowed unbacked bridged XRP to be minted on the tx chain. The attacker then withdrew real XRP from the reserve wallet against those balances. Tx says destination checks failed in...