Hyperbridge has released an update regarding the attack incident; the vulnerability stemmed from a flaw in the Merkle proof verification logic.

robot
Abstract generation in progress

ME News report: On April 13 (UTC+8), the blockchain interoperability protocol Hyperbridge disclosed details of a prior DOT attack, with losses of approximately $237k. The root cause was that the HandlerV1 contract’s VerifyProof() function lacked input validation and did not verify that leaf_index < leafCount, allowing attackers to forge Merkle proofs. The attackers used this to obtain administrator privileges for the bridged DOT token contract on Ethereum, then minted 1 billion bridged DOT tokens (about 2,800 times the legitimate circulating supply of roughly 356k tokens), and cashed out on decentralized exchanges. Hyperbridge stated that it is currently working with security partners to trace the funds, and cross-chain functionality will remain paused until the investigation is completed. (Source: Foresight News)

DOT0.23%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin