Hyperbridge exploit hits bridged Polkadot token on Ethereum; attacker mints 1B DOT and cashes out 108.2 ETH
A bridged version of Polkadot's DOT on Ethereum was exploited after an attacker minted 1 billion tokens without authorization, according to blockchain security firm PeckShield. Reports say the newly minted supply was dumped in a single transaction shortly afterward.
The attacker ultimately extracted 108.2 ETH, valued at about $237,000.
CertiK said the incident centered on the Hyperbridge gateway contract. The attacker allegedly used a forged message to seize unauthorized control, enabling changes to the admin role of the Polkadot token contract on Ethereum.