XRP Bridge Drained After Fake Deposits Mint Unbacked XRP
Tx says its XRP bridge was drained on Aug. 9 after its deposit-detection software credited transactions as XRP deposits even though no XRP arrived. The flaw allowed an attacker to mint bridged XRP on the Tx Chain (against unbacked balances) and then swap it through the XRP bridge for real XRP.
Key figures: XRPL monitoring found the bridge released about 199,916 XRP via 94 payments over 97 minutes. Each payment was authorized by 17 of 28 relayers, which incorrectly treated the attacker’s self-directed transactions as deposits. XRP Ledger analysis also dismissed a prior claim that the theft relied on “rippling” and said native XRP cannot be rippled; the root cause was the relayer misclassification.
After the exploit, Tx halted the XRP bridge, fixed the affected code, traced the stolen funds, and filed a report with the FBI’s Internet Crime Complaint Center. A CoreNest Capital/Sologenic/Coreum principal said the attacker converted the stolen XRP to Ethereum, moved funds onto Ethereum via THORChain, and sent them to Tornado Cash to increase trace difficulty.
Market note: the article reports XRP price barely moved despite the incident, with XRP hovering around the $1 level.
Neutral
The impact is likely limited in the broader market, so this reads as neutral. The exploit is serious for the affected protocol: ~199,916 XRP (~$202k) was minted against unbacked deposits, and the bridge was taken offline for remediation. Historically, bridge incidents often trigger short-term risk-off sentiment across related assets and can weigh on volumes for the impacted ecosystem.
However, the article notes XRP price “hasn’t budged much,” implying traders are not pricing in an immediate systemic XRP failure. Also, the attack mechanism appears technical and contained (deposit-detection/relayer misclassification), not a fundamental XRP Ledger compromise. Similar cases—where bridges halt operations, patch logic, and publish transparent root-cause analysis—tend to cause localized uncertainty rather than sustained bearish repricing, especially when the broader base asset price remains stable.
Short term: watch for sentiment swings, bridge-related on-chain activity halts, and any compensation/offering announcements by Tx.
Long term: if audits and monitoring improvements reduce recurrence risk, the market impact should fade; if further issues surface, confidence in cross-chain custody could deteriorate.