Cross-chain bridge vulnerability confirmed! Attackers mint tokens for arbitrage, and DOT was temporarily "created out of thin air." Further details of the Hyperbridge security incident reveal: its Handler V1 contract on Ethereum has a Merkle Mountain Range (MMR) proof replay vulnerability, ultimately causing a loss of approximately $242k. The core issue is that proofs and requests are not bound together. Attackers can reuse historical valid proofs, combined with forged new requests, to bypass verification mechanisms. Specific attack methods include: tampering with DOT Token administrator permissions to "mint" DOT and sell for profit (about $237.4k); using the same method to attack ARGN Token (loss of about $3,800); and ultimately withdrawing funds. Earlier, there was an extreme case where DOT on Ethereum was abnormally minted up to 1 billion tokens, triggering market panic. This vulnerability was discovered by security firm Phalcon Security and analyzed using on-chain tools.

DOT-4.78%
ETH1.72%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin