ANKR BRIDGE EXPLOITED — $300K DRAINED
Ankr's Ethereum cross-chain bridge got rekt. Attacker weaponized ONE legit Optimism tx (0.0044 ankrETH) to forge FIVE fake withdrawal receipts with valid consensus sigs but altered addresses/amounts. Bridge accepted them all.
LOOT:
5,372 aMATICb
515K $ankrPOL (~$56K)
8M $ANKR (~$31K)
83 ankrETH (~$192K)
Most swapped to 103 $ETH (~$217K).
Attacker: 0x9A88Dd45AE846A979705c9cFdfD0f229e592D703
Vulnerable contract: 0xc437DF90B37C1dB6657339E31BfE54627f0e7181
RED FLAG:
Hours before exploit, multiple Ankr operator wallets across Ethereum/Arbitrum/Linea were swept into one new wallet. Key compromise suspected but unconfirmed.
How does ONE deposit authorize FIVE withdrawals? This is a catastrophic cross-chain verification failure.
If you're bridging, assume every contract is one bug away from exit liquidity. DYOR or get rekt.
Ankr's Ethereum cross-chain bridge got rekt. Attacker weaponized ONE legit Optimism tx (0.0044 ankrETH) to forge FIVE fake withdrawal receipts with valid consensus sigs but altered addresses/amounts. Bridge accepted them all.
LOOT:
5,372 aMATICb
515K $ankrPOL (~$56K)
8M $ANKR (~$31K)
83 ankrETH (~$192K)
Most swapped to 103 $ETH (~$217K).
Attacker: 0x9A88Dd45AE846A979705c9cFdfD0f229e592D703
Vulnerable contract: 0xc437DF90B37C1dB6657339E31BfE54627f0e7181
RED FLAG:
Hours before exploit, multiple Ankr operator wallets across Ethereum/Arbitrum/Linea were swept into one new wallet. Key compromise suspected but unconfirmed.
How does ONE deposit authorize FIVE withdrawals? This is a catastrophic cross-chain verification failure.
If you're bridging, assume every contract is one bug away from exit liquidity. DYOR or get rekt.