Hyperbridge Exploit Allows Attacker to Mint 1 Billion Polkadot Tokens, Nets $237K

An attacker exploited Hyperbridge, a Polkadot-based cross-chain bridge, by forging a cross-chain message to mint 1 billion fraudulent bridged DOT tokens on Ethereum, ultimately stealing approximately $237,000. The exploit prompted Korean cryptocurrency exchanges Upbit and Bithumb to immediately suspend DOT deposits and withdrawals to protect their platforms from contamination by the fraudulent tokens. The incident has reignited industry-wide concerns about the security of cross-chain bridges, which have historically been vulnerable points in cryptocurrency infrastructure.

Hyperbridge Exploit Details and Financial Impact

• ▪A Hyperbridge exploit allowed an attacker to mint 1 billion bridged Polkadot tokens on Ethereum.
• ▪The Hyperbridge attacker cashed out approximately $237,000 from the exploit.

Bridge Security Concerns and Industry Debate

• ▪The Hyperbridge exploit revived debate over bridge security in the cryptocurrency industry.

Perspective of Cryptocurrency bridge security advocates

• ▪Cross-chain bridge exploits have resulted in billions of dollars in losses across the cryptocurrency industry
• ▪The Hyperbridge exploit demonstrates that cross-chain bridges continue to be a major security vulnerability in cryptocurrency infrastructure

Perspective of Upbit and Bithumb

• ▪Bithumb suspended DOT deposits and withdrawals to protect users from exposure to exploited tokens
• ▪Upbit suspended DOT deposits and withdrawals to prevent fraudulent bridged tokens from entering their platform

3 sources