Ankr Ethereum bridge attacked: approximately $290,000–$300,000 withdrawn; if you’ve used the bridge, don’t rush to take action
This afternoon (November 9), security firms Blockaid, SlowMist, and PeckShield issued alerts in succession: Ankr’s cross-chain bridge on Ethereum was attacked. Their estimated losses range from approximately $292,000 to $304,500, and the figures have yet to be reconciled.
What happened: Blockaid says the attacker took a small deposit that had already been redeemed on Optimism and initiated five consecutive withdrawals, transferring assets locked in the bridge to a new wallet. SlowMist provided more detail: five forged cross-chain receipts all referenced the same genuine transaction, but changed the recipient, token, and amount—and all carried valid signatures. One on-chain analytics account speculated that the signing private key had fallen into the attacker’s hands, but this has not been officially confirmed.
Who is affected: Mainly users who have assets in the bridge or were preparing to move assets across chains. The amount is relatively small, and there’s currently no indication that other Ankr products were affected. This also doesn’t mean the ANKR token itself has a problem, so don’t assume the entire platform was compromised.
What to watch next: At the time of posting, Ankr’s official X account had not issued a statement. Wait for the team to confirm the final losses, whether the bridge will be paused, and whether there will be a compensation plan. In the meantime, don’t click any “claim compensation” links—phishing activity tends to spike after incidents like this.
Have you moved assets across the Ankr bridge recently?
This is not investment advice.
Sources: Blockaid, SlowMist, PeckShield, The Block (X, 2026-11-09 16:42–17:55 HKT) · 2026-11-09 approximately 20:30 HKT
#Ankr #跨链桥 #链上安全 #夯B媒体 $ANKR