Coreum Bridge Exploit Drains Nearly 200,000 XRP via Relay Logic Flaw

Attackers exploited Coreum's cross-chain bridge deposit verification, executing 94 transactions in 97 minutes to steal ~199,916 XRP without compromising XRPL or private keys.

Woofun AI reports that the Coreum bridge connecting to the XRP Ledger was compromised on August 9 due to vulnerabilities in its deposit verification mechanism. Attackers leveraged flaws in the relay logic to execute 94 multi-signature approval transactions within a 97-minute window, draining approximately 199,916 XRP from the cross-chain wallet. The incident reduced the wallet balance from roughly 200,000 coins (valued at about $200,000) to 493.5 coins. No intrusion into the XRPL or private key leakage occurred; instead, attackers fabricated deposit operations to deceive the relay system into processing unauthorized withdrawals.