A serious security breach has hit the crypto space involving a cross-chain bridge connected to Polkadot and Ethereum.
According to blockchain security firm CertiK, an attacker exploited a flaw in Hyperbridge’s message verification system by using forged state proofs. This allowed them to bypass security checks and gain admin control over a bridged DOT token contract.
💥 Once inside, the attacker:
Took over admin + minting rights Generated 1,000,000,000 DOT tokens Dumped them into liquidity pools via Uniswap
💰 The stolen tokens were swapped for around 108 ETH (~$237K).
⚠️ Why this matters
The issue wasn’t just token minting — it was a failure in cross-chain proof validation. The system accepted fake data as real, allowing full contract takeover.
Even worse, this may not be isolated. Reports suggest similar weaknesses could exist in the same ISMP framework, raising concerns for other bridged assets.
📉 Market impact
DOT dropped nearly 4–5% after the news, showing how quickly bridge exploits affect investor confidence.
🧠 Key lesson
Cross-chain bridges are powerful but highly vulnerable. A single validation bug can lead to total supply manipulation and contract takeover.
Until fixes are confirmed, this incident is a strong reminder: 👉 Always be cautious with bridged tokens and DeFi exposure.