logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. XRP bridge exploit update: tx identifies flaw, alerts FBI

    XRP bridge exploit update: tx identifies flaw, alerts FBI

    By: rootdata|2026/08/12 09:34:26
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    NOWNOW
    00.00%--
    THETHE
    00.00%--
    REALREAL
    00.00%--
     

    Tx said on Aug. 12 that its XRPL bridge was exploited on Aug. 9 after an attacker abused faulty deposit detection logic, draining XRP from the bridge reserve.

    Summary

    • Tx says attackers stole 198,715.88 XRP after exploiting a flaw in bridge deposit verification logic.
    • The XRPL bridge remains halted while developers review security upgrades and possible user remedy options.
    • Attackers converted stolen XRP into ETH before routing funds through THORChain and Tornado Cash afterward.
    • Tx filed an FBI IC3 complaint with transaction records and additional identifying information about attackers.
    • Other bridged assets remain fully backed, while bridged XRP currently lacks complete reserve backing.

    Technical lead Reza Bashash put the stolen amount at 198,715.88 XRP. The bridge remains halted while the team evaluates recovery options and strengthens the affected software, according to its latest post.

    The company said the flaw caused transactions that never delivered XRP to the bridge to be registered as deposits. This allowed unbacked bridged XRP to be minted on the tx chain. The attacker then withdrew real XRP from the reserve wallet against those balances.

    Tx says destination checks failed in the bridge relayer

    Tx said the vulnerability was in the bridge software rather than the XRP Ledger itself. Bashash described the issue as a bug in XRPL relayer logic involving cross currency payments and the DefaultRipple feature. The central failure, according to both the company and independent ledger analysis, was insufficient destination validation.

    The relayers accepted transactions carrying the expected bridge memo without confirming that the destination was actually the bridge vault. Once enough relayers attested to those false deposits, the tx side bridge logic credited unbacked balances that could be redeemed for genuine XRP.

    As previously reported, public ledger analysis traced 199,916.3 XRP leaving the bridge in 94 payments over 97 minutes. That earlier figure measures XRP released from the reserve, while Bashash now says 198,715.88 XRP was stolen. Tx has not publicly explained the roughly 1,200 XRP difference between the figures.

    DefaultRipple did not itself drain native XRP

    Earlier discussion of the incident focused on DefaultRipple, an XRP Ledger setting that applies to issued assets. XRPL.to's analysis found that native XRP did not leave through rippling. Instead, all observed XRP releases were signed by the bridge's own multisignature setup.

    The analysis found 17 of 28 relayer signatures on the bridge payouts and 21 relayers attesting the attacker's first phantom deposit. That evidence points to shared verification logic accepting invalid input rather than stolen signing keys.

    The distinction matters because tx described the incident as "isolated" to bridged XRP. Other bridged assets remain fully backed, according to the company. Bridged XRP on the tx chain is not currently fully backed, and the team has not yet announced a reimbursement mechanism.

    Stolen XRP moved through THORChain and Tornado Cash

    Bashash said the stolen XRP was converted into ETH, moved to Ethereum through THORChain and ultimately transferred to Tornado Cash. Direct tracing becomes more difficult after funds enter the privacy protocol, although investigators can still examine the transaction history leading to that point.

    Tx said it traced the stolen assets across chains and filed a formal complaint with the FBI's Internet Crime Complaint Center. The filing included transaction records and additional identifying information, according to the project. Filing an IC3 complaint does not by itself establish that the FBI has opened a criminal investigation.

    The incident fits a wider security pattern. In related coverage, cross-chain bridge exploits have caused more than $4 billion in losses since 2021, with failures in cross-chain verification repeatedly providing attackers a route to unbacked assets.

    -- Price

    --

    What happens next for affected bridged XRP holders

    Tx said it has identified and remedied the vulnerable code, but the XRPL bridge remains offline while the team reviews additional security changes. The project has not announced a date for restoring bridge operations.

    The company is also evaluating ways to address losses for affected users and said it will publish a mechanism and timeline in a later update. For now, tx says holders do not need to take action and warned users against unofficial recovery services.

    The next verified developments to watch are the final reconciliation of the stolen amount, any recovery or freezing of funds, the user remedy plan and the conditions for reopening the bridge. The team has also said it intends to pursue identification and prosecution of the attacker, but that outcome remains dependent on the continuing investigation and law enforcement process.

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    Cryptocurrencies Make Their Way in Latin America Amid Regulatory Gaps and Controversies

    Cryptocurrencies Make Their Way in Latin America Amid Regulatory Gaps and Controversies

    Who Really Captures Crypto Revenues?

    Who Really Captures Crypto Revenues?

    Google and Ryanair Sign Five-Year Cloud and AI Agreement

    Google and Ryanair Sign Five-Year Cloud and AI Agreement

    Google Pixel 11 Released: Minor Hardware Changes, Major Gemini Features

    Google Pixel 11 Released: Minor Hardware Changes, Major Gemini Features

    How to Use Dune: Dashboards That Help Cryptocurrency Investors

    How to Use Dune: Dashboards That Help Cryptocurrency Investors

    Crypto and Tokenized Stocks: The SEC's Major Shift Becomes Clearer

    Crypto and Tokenized Stocks: The SEC's Major Shift Becomes Clearer

    The SEC is preparing a framework for crypto fundraising and an exemption that could open 24/7 trading of tokenized stocks.
    Contradicting Expectations! Goldman Sachs Strategist: The Federal Reserve May Remain Steady This Year

    Contradicting Expectations! Goldman Sachs Strategist: The Federal Reserve May Remain Steady This Year

    What Makes FOMO So Scary?

    What Makes FOMO So Scary?

    Intervention in the Yen: The Joint Maneuver That Manipulates Its Wealth and Exposes State Fragility

    Intervention in the Yen: The Joint Maneuver That Manipulates Its Wealth and Exposes State Fragility

    London Controls 70% of Gold Trading, UK Moves to Regulate Tokenized Gold! FCA Proposes New Regulations

    London Controls 70% of Gold Trading, UK Moves to Regulate Tokenized Gold! FCA Proposes New Regulations

    Bitcoin Core Developer States: Code, Not White Paper, Matters

    Bitcoin Core Developer States: Code, Not White Paper, Matters

    Bitcoin Core developer Jeff Garzik stated that the early success of Bitcoin did not stem from the white paper, but rather from widespread exposure generated by a post on Slashdot in July 2010, along with the combination of both factors, as quoted by Wu Blockchain.
    SpaceX Director Antonio Gracias Discloses 6.5% Stake

    SpaceX Director Antonio Gracias Discloses 6.5% Stake

    AI Hyperscalers Are Pricing Bitcoin Miners Off The Grid— Here's Why Its A Massive Win-Win

    AI Hyperscalers Are Pricing Bitcoin Miners Off The Grid— Here's Why Its A Massive Win-Win

    AI is pricing Bitcoin miners off the main power grid. Headlines call it a surrender, but a massive infrastructure win is hiding inside the eviction.
    Rasmal Ventures Participates in Yuno's $45 Million Round

    Rasmal Ventures Participates in Yuno's $45 Million Round

    The Real Cost of Strategy's Forced Dollar Hoarding

    The Real Cost of Strategy's Forced Dollar Hoarding

    Fractionating Bitcoin Custody is the Only Real Shield in the Sector

    Fractionating Bitcoin Custody is the Only Real Shield in the Sector

    MEXC Leaves the Netherlands: Kraken Partnership Absorbs Customers

    MEXC Leaves the Netherlands: Kraken Partnership Absorbs Customers

    ENS Completes a Quiet "Self-Revolution"

    ENS Completes a Quiet "Self-Revolution"

    How to Buy SpaceX Stock in 2026: Price, Ticker, and Where to Buy

    How to Buy SpaceX Stock in 2026: Price, Ticker, and Where to Buy

    Learn how to buy SpaceX stock in 2026, including the SPCX ticker, latest price, brokerage access, tokenized stock options, trading hours, and key considerations.
    Blockchain.RIO Establishes Rio as a Global Stage for Financial Innovation

    Blockchain.RIO Establishes Rio as a Global Stage for Financial Innovation

    The Blockchain Rio Week 2026 began this Tuesday, August 11, in Rio de Janeiro, with a day entirely dedicated to the institutional layer of the sector — regulators, central banks, market associations, and major financial institutions, before the opening of the main event to a broader audience. The da...
    "It was right to fire Luke Dashjr, even if it was 10 years late": Turtlecute

    "It was right to fire Luke Dashjr, even if it was 10 years late": Turtlecute

    Hardware Wallet: The Challenge of Zero Trust in Your Seed

    Hardware Wallet: The Challenge of Zero Trust in Your Seed

    Is Bitcoin Approaching a Bottom? The Paradoxical Signal from USDT

    Is Bitcoin Approaching a Bottom? The Paradoxical Signal from USDT

    Even if Bitcoin Rises, It May Not Concern You

    Even if Bitcoin Rises, It May Not Concern You

    Binance rejects claim it will withdraw Singapore case against RedotPay

    Binance rejects claim it will withdraw Singapore case against RedotPay

    Global Cybersecurity Alliance (GCSA) and Academy of Engineering and Technology of the Developing World (AETDEW) Jointly Establish AI Cybersecurity Research Center

    Global Cybersecurity Alliance (GCSA) and Academy of Engineering and Technology of the Developing World (AETDEW) Jointly Establish AI Cybersecurity Research Center

    Bank of England to test stablecoin, digital currency use in cross-border finance

    Bank of England to test stablecoin, digital currency use in cross-border finance

    Why RWA is Still Growing Amid the DeFi Downturn?

    Why RWA is Still Growing Amid the DeFi Downturn?

    Web3: Foreign Media Reports Crypto Exchanges Expand Multi-Asset Trading with CFDs

    Web3: Foreign Media Reports Crypto Exchanges Expand Multi-Asset Trading with CFDs

    Gold Price and Inflation: Can the US CPI Push Gold to $5,000?

    Gold Price and Inflation: Can the US CPI Push Gold to $5,000?

    Cryptocurrencies Make Their Way in Latin America Amid Regulatory Gaps and Controversies

    Who Really Captures Crypto Revenues?

    Google and Ryanair Sign Five-Year Cloud and AI Agreement

    Google Pixel 11 Released: Minor Hardware Changes, Major Gemini Features

    How to Use Dune: Dashboards That Help Cryptocurrency Investors

    Crypto and Tokenized Stocks: The SEC's Major Shift Becomes Clearer

    The SEC is preparing a framework for crypto fundraising and an exemption that could open 24/7 trading of tokenized stocks.
    ...
    Invite friends, get rewards
    Invite to get up to $160 + 40% commission
    Invite friends, get rewardsInvite

    Contents

    Tx says destination checks failed in the bridge relayer
    DefaultRipple did not itself drain native XRP
    Stolen XRP moved through THORChain and Tornado Cash
    NOW
    What happens next for affected bridged XRP holders

    Latest articles

    2026/08/12

    Who Really Captures Crypto Revenues?

    APPAPP
    00.00%--
    SPACESPACE
    00.00%--
    NOWNOW
    00.00%--
    THETHE
    00.00%--
    2026/08/12

    Google Pixel 11 Released: Minor Hardware Changes, Major Gemini Features

    NOWNOW
    00.00%--
    THETHE
    00.00%--
    CROSSCROSS
    00.00%--
    2026/08/12

    AI Hyperscalers Are Pricing Bitcoin Miners Off The Grid— Here's Why Its A Massive Win-Win

    AI is pricing Bitcoin miners off the main power grid. Headlines call it a surrender, but a massive infrastructure win is hiding inside the eviction.
    POWERPOWER
    00.00%--
    NOWNOW
    00.00%--
    EDGEEDGE
    00.00%--
    2026/08/12

    The Real Cost of Strategy's Forced Dollar Hoarding

    STRCSTRC
    00.00%--
    COSTCOST
    00.00%--
    NOWNOW
    00.00%--
    THETHE
    00.00%--
    2026/08/12

    Blockchain.RIO Establishes Rio as a Global Stage for Financial Innovation

    The Blockchain Rio Week 2026 began this Tuesday, August 11, in Rio de Janeiro, with a day entirely dedicated to the institutional layer of the sector — regulators, central banks, market associations, and major financial institutions, before the opening of the main event to a broader audience. The da...
    NOWNOW
    00.00%--
    BASEDBASED
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download