Polkadot said on April 13 it has identified a security issue involving Hyperbridge's Ethereum gateway contract. The team said the vulnerability only affects DOT that was bridged to Ethereum through Hyperbridge, and does not impact DOT held within the Polkadot ecosystem or DOT transferred via other bridges. Polkadot, its parachains, and native DOT remain secure, it added. Hyperbridge has been temporarily suspended while the issue is investigated.

Polkadot said it has identified a vulnerability affecting Hyperbridge's Ethereum gateway contract, emphasizing the issue is confined to DOT bridged to Ethereum through Hyperbridge. The project said DOT held within the Polkadot ecosystem and DOT moved via other bridges are not impacted. Polkadot, its parachains and the native DOT token remain secure. Hyperbridge has been temporarily suspended while the matter is investigated, according to a BlockBeats report on April 13.

According to ChainCatcher, Polkadot said on X that its team has identified a security issue in Hyperbridge's Ethereum gateway contract. The problem is limited to DOT bridged to Ethereum through Hyperbridge; DOT held within the Polkadot ecosystem and tokens moved via other bridging solutions are not affected. Polkadot added that its network, parachains and native DOT remain secure, while Hyperbridge has paused operations as the investigation continues. ChainCatcher previously reported that Hyperbridge suffered an MMR proof replay vulnerability, with estimated losses of about $242,000.

An attacker exploited Polkadot-based Hyperbridge, minting 1 billion bridged DOT and walking away with $237,000 in proceeds.

Polkadot said a recently disclosed vulnerability tied to Hyperbridge only impacts DOT that was bridged to Ethereum through Hyperbridge, and does not affect native DOT or assets routed through other bridging options in the Polkadot ecosystem. In an official update, Polkadot stated that the mainnet and its parachains remain fully operational and that related assets are secure. Hyperbridge has been temporarily suspended as the incident remains under investigation. Earlier reports said the bridge exploit led to the minting of 1 billion DOT on Ethereum, which were later sold. The attacker was estimated to have netted about $237,000.

Alameda Research has unstaked about $16 million in SOL, according to Arkham. The tokens were transferred to a wallet associated with creditor distributions, pointing to ongoing repayments tied to prior obligations.

A bridged version of Polkadot's DOT on Ethereum was exploited after an attacker minted 1 billion tokens without authorization, according to blockchain security firm PeckShield. Reports say the newly minted supply was dumped in a single transaction shortly afterward. The attacker ultimately extracted 108.2 ETH, valued at about $237,000. CertiK said the incident centered on the Hyperbridge gateway contract. The attacker allegedly used a forged message to seize unauthorized control, enabling changes to the admin role of the Polkadot token contract on Ethereum.

ChainCatcher reports, citing monitoring by Yujin, that Sun Zhengchen's USDD withdrew 109 million USDT from the lending platform Spark about an hour ago and then transferred the funds into the USDD PSM pool. Available liquidity for USDD-to-USDT conversions currently stands at $42 million.

PeckShield said it detected abnormal activity involving DOT on Ethereum on April 13 (UTC+8), where 1 billion DOT tokens were minted and rapidly sold. On-chain data indicates the attacker seized compromised administrative privileges about an hour earlier, transferred contract control to a malicious address, then minted 1 billion DOT and dumped the tokens, sending the price from $1.22 to near zero. The situation remains developing and Polkadot's official team has not issued a statement. The attack affected bridge assets on Ethereum rather than Polkadot's native chain. (Source: ChainCatcher)