XRP bridge loses 200,000 XRP after relayer logic flaw

Nearly 200,000 XRP was drained from the Coreum XRPL bridge on Aug. 9 after an attacker appears to have exploited a flaw in its relayer logic, rather than a vulnerability in the XRP Ledger itself. Summary Nearly 200,000 XRP left Coreum’s bridge in 94 signed payments during a 97 minute attack. Blockchain analysis found 17 of 28 relayer signatures authorized each XRP payout from the bridge. Relayer code processed successful payments with bridge memos without verifying the payment destination address first. XRPL documentation confirms native XRP has no trust line, contradicting the initial rippling explanation directly. Coreum had not published an official incident report by Tuesday while the bridge remained halted. On chain analysis published Aug. 11 traced 199,916.3 XRP leaving the bridge account through 94 payments over 97 minutes. The bridge held about 200,410 XRP before the sequence began at 19:16 UTC. By 20:53 UTC, its balance had fallen to 493.5 XRP. Every outgoing XRP payment carried the bridge’s own multisignature authorization, with 17 signatures from its 28 relayer keys. The evidence does not indicate that those keys were stolen. Coreum bridge drained of XRP, source: XRPL.to...