A recent cyber attack on the tx project team's cross-chain bridge, which connects the XRP Ledger to their blockchain, resulted in a loss of approximately $200,000. This incident took place on August 9, when the attacker exploited a flaw in the deposit processing system.
The vulnerability allowed the hacker to bypass normal protocols, making it possible to withdraw wrapped tokens without legitimate XRP deposits. As a result, nearly 200,000 XRP, valued at $199,916, was swiftly drained from the bridge's reserve wallet during a 97-minute withdrawal process. The tx team reported that 94 transactions were made to transfer funds to two different wallets, leaving only 493.5 XRP remaining in the reserve.
Importantly, the attack did not compromise private keys nor did it affect funds on the mainnet or any exchanges. Recognizing the suspicious transactions, the tx team immediately paused the bridge and initiated a code patch while coordinating with blockchain experts. They also reported the incident to the FBI’s Internet Crime Complaint Center and are considering ways to compensate impacted users.
