RWA platform tx, known for its Sologenic and Coreum projects, published on Aug. 12 the official findings of its investigation into the Aug. 9 hack of its cross-chain bridge. The attack lasted just 97 minutes and resulted in the theft of 200,000 XRP. The attacker did not compromise any cryptographic keys but exploited a critical flaw in the bridge’s deposit verification logic: by simulating deposits of wrapped CORE tokens between addresses under their control with memos containing destination details, they tricked the system into issuing unbacked tokens. A quorum of 17 multisignature keys held by relay nodes automatically approved the withdrawal of real XRP from the reserve. Developers have since halted bridge operations, fixed the bug and filed an official complaint with the FBI’s Internet Crime Complaint Center (IC3).
Source: Read the original article
