Question 1

How was the tx XRP bridge drained without a stolen key?

Accepted Answer

The bridge's software counted transactions as deposits even when no XRP was delivered, then issued bridged XRP against them; the attacker sent those unbacked tokens back through the bridge to withdraw real XRP, because the relayer code checked for a valid memo but never verified the destination address.

Question 2

How much was taken and how much was left?

Accepted Answer

The attacker pulled out 199,916 XRP worth over $200,000 across 94 transactions, leaving the bridge's reserve wallet with just 493 XRP, worth roughly $500.

Question 3

What has tx done in response?

Accepted Answer

tx says it has halted the bridge, patched the vulnerable code, engaged blockchain forensics specialists, and filed a complaint with the FBI's Internet Crime Complaint Center, but it has not yet said how affected holders will be compensated.

Sologenic

tx XRP bridge drained of 99.7% of its reserve in $200,000 exploit

One sharp brief.
Every day.

Sologenic

tx XRP bridge drained of 99.7% of its reserve in $200,000 exploit

One sharp brief.Every day.

One sharp brief.
Every day.