Coreum–XRPL Bridge Verification Flaw Exploited, About 200,000 XRP Withdrawn

CoinDesk reported that a cross-chain bridge linking Coreum and the XRP Ledger (XRPL) was exploited due to a weakness in its verification logic, allowing roughly 200,000 XRP to be withdrawn in about 97 minutes. Market analyst Xaif Crypto said the attacker did not steal private keys or compromise the XRP Ledger itself. Instead, the exploit targeted a flaw in the bridge’s relayer and relay verification process, enabling unauthorized withdrawals. According to the report, the bridge software did not adequately validate transfer details. It allegedly failed to properly confirm the true receiving address and relied on transaction remarks to decide whether a deposit was legitimate. That design could allow forged transactions to be treated as valid deposits, prompting the bridge to release real XRP. The attackers are said to have executed 94 consecutive payments within approximately 97 minutes, triggering the release of real assets. The incident is described as impacting the infrastructure that connects Coreum and XRPL, not the XRP Ledger’s consensus mechanism or underlying cryptography. The bridging service has been suspended. Reports indicate the Coreum cross-chain bridge was temporarily halted, with a full investigation and incident report still pending. Further analysis is expected to clarify how the vulnerability was used and where the transferred XRP ultimately went. Cross-chain bridges generally depend on relayers and verification systems to confirm that assets have been deposited on one chain before releasing corresponding assets on the other. When verification fails, attackers may still extract real funds through the bridge even if the underlying blockchains continue operating normally. The report also highlighted a separate risk for XRP holders: police in Seoul, South Korea arrested three suspects accused of defrauding 71 investors via a fake Flare Network XRP staking scheme involving about 3.4 million XRP. The XRP Ledger Foundation has previously warned that scams are circulating that falsely claim to distribute XRP rewards under Ripple’s name and trick users into participating by scanning wallets. Together, the incidents underscore that XRP users face threats from both software weaknesses and social-engineering scams. For markets, the main point is that the alleged losses occurred at the bridge layer rather than on the XRP Ledger mainchain. As more assets move through bridges, custodial services, and peripheral applications, verification design in this surrounding infrastructure is increasingly becoming a key weak spot in the crypto ecosystem.