logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. XRP bridge exploit update: tx identifies flaw, alerts FBI

    XRP bridge exploit update: tx identifies flaw, alerts FBI

    By: rootdata|2026/08/12 09:34:26
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    NOWNOW
    00.00%--
    THETHE
    00.00%--
    REALREAL
    00.00%--
     

    Tx said on Aug. 12 that its XRPL bridge was exploited on Aug. 9 after an attacker abused faulty deposit detection logic, draining XRP from the bridge reserve.

    Summary

    • Tx says attackers stole 198,715.88 XRP after exploiting a flaw in bridge deposit verification logic.
    • The XRPL bridge remains halted while developers review security upgrades and possible user remedy options.
    • Attackers converted stolen XRP into ETH before routing funds through THORChain and Tornado Cash afterward.
    • Tx filed an FBI IC3 complaint with transaction records and additional identifying information about attackers.
    • Other bridged assets remain fully backed, while bridged XRP currently lacks complete reserve backing.

    Technical lead Reza Bashash put the stolen amount at 198,715.88 XRP. The bridge remains halted while the team evaluates recovery options and strengthens the affected software, according to its latest post.

    The company said the flaw caused transactions that never delivered XRP to the bridge to be registered as deposits. This allowed unbacked bridged XRP to be minted on the tx chain. The attacker then withdrew real XRP from the reserve wallet against those balances.

    Tx says destination checks failed in the bridge relayer

    Tx said the vulnerability was in the bridge software rather than the XRP Ledger itself. Bashash described the issue as a bug in XRPL relayer logic involving cross currency payments and the DefaultRipple feature. The central failure, according to both the company and independent ledger analysis, was insufficient destination validation.

    The relayers accepted transactions carrying the expected bridge memo without confirming that the destination was actually the bridge vault. Once enough relayers attested to those false deposits, the tx side bridge logic credited unbacked balances that could be redeemed for genuine XRP.

    As previously reported, public ledger analysis traced 199,916.3 XRP leaving the bridge in 94 payments over 97 minutes. That earlier figure measures XRP released from the reserve, while Bashash now says 198,715.88 XRP was stolen. Tx has not publicly explained the roughly 1,200 XRP difference between the figures.

    DefaultRipple did not itself drain native XRP

    Earlier discussion of the incident focused on DefaultRipple, an XRP Ledger setting that applies to issued assets. XRPL.to's analysis found that native XRP did not leave through rippling. Instead, all observed XRP releases were signed by the bridge's own multisignature setup.

    The analysis found 17 of 28 relayer signatures on the bridge payouts and 21 relayers attesting the attacker's first phantom deposit. That evidence points to shared verification logic accepting invalid input rather than stolen signing keys.

    The distinction matters because tx described the incident as "isolated" to bridged XRP. Other bridged assets remain fully backed, according to the company. Bridged XRP on the tx chain is not currently fully backed, and the team has not yet announced a reimbursement mechanism.

    Stolen XRP moved through THORChain and Tornado Cash

    Bashash said the stolen XRP was converted into ETH, moved to Ethereum through THORChain and ultimately transferred to Tornado Cash. Direct tracing becomes more difficult after funds enter the privacy protocol, although investigators can still examine the transaction history leading to that point.

    Tx said it traced the stolen assets across chains and filed a formal complaint with the FBI's Internet Crime Complaint Center. The filing included transaction records and additional identifying information, according to the project. Filing an IC3 complaint does not by itself establish that the FBI has opened a criminal investigation.

    The incident fits a wider security pattern. In related coverage, cross-chain bridge exploits have caused more than $4 billion in losses since 2021, with failures in cross-chain verification repeatedly providing attackers a route to unbacked assets.

    -- Price

    --

    What happens next for affected bridged XRP holders

    Tx said it has identified and remedied the vulnerable code, but the XRPL bridge remains offline while the team reviews additional security changes. The project has not announced a date for restoring bridge operations.

    The company is also evaluating ways to address losses for affected users and said it will publish a mechanism and timeline in a later update. For now, tx says holders do not need to take action and warned users against unofficial recovery services.

    The next verified developments to watch are the final reconciliation of the stolen amount, any recovery or freezing of funds, the user remedy plan and the conditions for reopening the bridge. The team has also said it intends to pursue identification and prosecution of the attacker, but that outcome remains dependent on the continuing investigation and law enforcement process.

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    AI Payments Decline by 93% This Year for x402

    AI Payments Decline by 93% This Year for x402

    Hawaii crypto ATM cash deposits banned from Oct. 1

    Hawaii crypto ATM cash deposits banned from Oct. 1

    40 Companies Including JP Morgan and Goldman Sachs Experiment with Stock and Bond Trading on Blockchain

    40 Companies Including JP Morgan and Goldman Sachs Experiment with Stock and Bond Trading on Blockchain

    Debt in Pesos: Economy Managed to Renew All Maturities and Avoided Deepening Liquidity Tension

    Debt in Pesos: Economy Managed to Renew All Maturities and Avoided Deepening Liquidity Tension

    Finance awarded $4.49 trillion and achieved a rollover of 100.26%. The result left the effect of the operation on the amount of pesos practically neutral. The main award corresponded to the Lecap S30N6, maturing on November 30, where Finance placed $3.29 trillion at a TEM of 2.11% and a TIREA of 28....
    The AI-Generated Pattern Hides You From Surveillance Cameras—Including Flock

    The AI-Generated Pattern Hides You From Surveillance Cameras—Including Flock

    Prediction market users report 79% loss rate in US survey

    Prediction market users report 79% loss rate in US survey

    Northrop Grumman's Spacecraft Takes Over Satellite Servicing

    Northrop Grumman's Spacecraft Takes Over Satellite Servicing

    web3: Hacker Group Claims to Have Infiltrated Uber Freight and Stolen Internal Documents

    web3: Hacker Group Claims to Have Infiltrated Uber Freight and Stolen Internal Documents

    web3: Cerebras Shares Drop 14% After Raising Full-Year Guidance

    web3: Cerebras Shares Drop 14% After Raising Full-Year Guidance

    US-UK crypto pact sets direction, not binding rules

    US-UK crypto pact sets direction, not binding rules

    My friends ask me when to buy bitcoin…

    My friends ask me when to buy bitcoin…

    How Russia Evades Sanctions Using Cryptocurrencies?

    How Russia Evades Sanctions Using Cryptocurrencies?

    Grubhub Distributes $23.8 Million to Deliverers and Customers Following FTC Settlement

    Grubhub Distributes $23.8 Million to Deliverers and Customers Following FTC Settlement

    The Federal Trade Commission has begun distributing $23.8 million among 640,038 customers and deliverers of Grubhub as part of a settlement that uncovered deceptive practices on the delivery platform. The checks arrive after a lawsuit was filed in December 2024 by the FTC and the Attorney General of...
    Gold Soars to $4,400 as China Continues Its Purchases

    Gold Soars to $4,400 as China Continues Its Purchases

    Bradesco Enters Crypto Custody: What Changes for the Market

    Bradesco Enters Crypto Custody: What Changes for the Market

    BitMart reserve doubts raise custody concerns: Arch CTO

    BitMart reserve doubts raise custody concerns: Arch CTO

    OranjeBTC Launches DIGY11, First ETF of Preferred Shares in the Bitcoin Ecosystem with Monthly Distributions

    OranjeBTC Launches DIGY11, First ETF of Preferred Shares in the Bitcoin Ecosystem with Monthly Distributions

    OranjeBTC announces the launch of DIGY11, the first ETF of preferred shares in the Bitcoin ecosystem with monthly distributions.
    Microsoft Fixes 421 Vulnerabilities and a Zero-Day Exploit in August Patch Tuesday

    Microsoft Fixes 421 Vulnerabilities and a Zero-Day Exploit in August Patch Tuesday

    Microsoft released a massive update with 421 fixes, including a zero-day vulnerability that grants SYSTEM privileges. Users are urged to install the patch immediately.
    Bitcoin could reach $1M by 2030, Nansen CEO says

    Bitcoin could reach $1M by 2030, Nansen CEO says

    Foreign Media: Three AI Pioneers Oppose Comprehensive Tightening of Open Models

    Foreign Media: Three AI Pioneers Oppose Comprehensive Tightening of Open Models

    Argentina's Mirror: Brazilian Banks Also Suffer Record Delinquency

    Argentina's Mirror: Brazilian Banks Also Suffer Record Delinquency

    Credit delinquency in Brazil reached a peak of 5.6% in May. Despite official programs, banks speak of a "vicious circle" or "sudden death" due to the situation of over-indebtedness with credit cards.
    Web3: Goldman Sachs Plans $2.25 Billion Acquisition of NEOS to Enter Bitcoin Income ETF Market

    Web3: Goldman Sachs Plans $2.25 Billion Acquisition of NEOS to Enter Bitcoin Income ETF Market

    XRP Ledger upgrade gains Ripple vote for bundled fixes

    XRP Ledger upgrade gains Ripple vote for bundled fixes

    Gold Price Climbed After July Inflation Data, But Bitcoin Didn’t. Why?

    Gold Price Climbed After July Inflation Data, But Bitcoin Didn’t. Why?

    Mesh by Automattic Launches on Android Platform

    Mesh by Automattic Launches on Android Platform

    web3: Tesla Plans to Build a $10 Billion Solar Factory in Texas

    web3: Tesla Plans to Build a $10 Billion Solar Factory in Texas

    Form Energy Raises $750 Million to Expand Long-Duration Energy Storage Battery Production

    Form Energy Raises $750 Million to Expand Long-Duration Energy Storage Battery Production

    Solana Community Argues Over Whether Its Foundation Should Pick Winners

    Solana Community Argues Over Whether Its Foundation Should Pick Winners

    Web3: South Korea Requires New Investors in Leveraged ETFs to Complete Simulation Trading First

    Web3: South Korea Requires New Investors in Leveraged ETFs to Complete Simulation Trading First

    Trump's Statements Available for $100,000 a Month: Media Groups File Lawsuit to Ban Sales

    Trump's Statements Available for $100,000 a Month: Media Groups File Lawsuit to Ban Sales

    AI Payments Decline by 93% This Year for x402

    Hawaii crypto ATM cash deposits banned from Oct. 1

    40 Companies Including JP Morgan and Goldman Sachs Experiment with Stock and Bond Trading on Blockchain

    Debt in Pesos: Economy Managed to Renew All Maturities and Avoided Deepening Liquidity Tension

    Finance awarded $4.49 trillion and achieved a rollover of 100.26%. The result left the effect of the operation on the amount of pesos practically neutral. The main award corresponded to the Lecap S30N6, maturing on November 30, where Finance placed $3.29 trillion at a TEM of 2.11% and a TIREA of 28....

    The AI-Generated Pattern Hides You From Surveillance Cameras—Including Flock

    Prediction market users report 79% loss rate in US survey

    ...
    Invite friends, get rewards
    Invite to get up to $160 + 40% commission
    Invite friends, get rewardsInvite

    Contents

    Tx says destination checks failed in the bridge relayer
    DefaultRipple did not itself drain native XRP
    Stolen XRP moved through THORChain and Tornado Cash
    NOW
    What happens next for affected bridged XRP holders

    Latest articles

    2026/08/12

    My friends ask me when to buy bitcoin…

    EATEAT
    00.00%--
    NOWNOW
    00.00%--
    THETHE
    00.00%--
    TRUTHTRUTH
    00.00%--
    2026/08/12

    Grubhub Distributes $23.8 Million to Deliverers and Customers Following FTC Settlement

    The Federal Trade Commission has begun distributing $23.8 million among 640,038 customers and deliverers of Grubhub as part of a settlement that uncovered deceptive practices on the delivery platform. The checks arrive after a lawsuit was filed in December 2024 by the FTC and the Attorney General of...
    NOWNOW
    00.00%--
    BASEDBASED
    00.00%--
    2026/08/12

    Bitcoin: Individuals Hold Three Times More at Home Than Wall Street ETFs

    Non-custodial wallets hold over $800 billion in Bitcoin, nearly three times more than ETFs and treasuries.
    SPOTSPOT
    00.00%--
    NOWNOW
    00.00%--
    HOMEHOME
    00.00%--
    THETHE
    00.00%--
    2026/08/12

    VideoVerse Acquisition Deal Takes a Turn: Faces Forged Documents and Fraud Allegations

    NOWNOW
    00.00%--
    THETHE
    00.00%--
    SIGNSIGN
    00.00%--
    2026/08/12

    Web3: Saylor Refutes Musk's Claim That Currency Loses Meaning

    NOWNOW
    00.00%--
    THETHE
    00.00%--
    PLAYPLAY
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download