Ankr Ethereum bridge drained about $300K in exploit with contract unpaused
An attacker reused a small Optimism deposit to trigger five withdrawals from Ankr's Ethereum bridge, with losses estimated around $292,000-303,000 and Blockaid flagging earlier operator-wallet movements.
Crypto.news and TokenPost report that Ankr's Ethereum cross-chain bridge was drained in five unauthorized withdrawals, with loss estimates ranging from about $292,000 to $303,600. The attacker reportedly reused a small, already redeemed Optimism deposit to unlock bridge-held tokens and send them to a new wallet. Blockaid, cited in TokenPost, says assets from Ankr operator wallets on Ethereum, Arbitrum and Linea were consolidated hours earlier at an address
beginning 0x4Ea before being sent through a relayer. The bridge's public pause flag remained false after the exploit, meaning the contract stayed unpaused despite the loss. Ankr had not yet published a detailed incident response or reimbursement plan in the coverage reviewed.
Watch for an official Ankr incident report clarifying the root cause, final loss figures and any reimbursement commitments, plus on-chain updates to the bridge's pause status and movements from the attacker-linked wallet.
(Source: CoinMarketCap)
An attacker reused a small Optimism deposit to trigger five withdrawals from Ankr's Ethereum bridge, with losses estimated around $292,000-303,000 and Blockaid flagging earlier operator-wallet movements.
Crypto.news and TokenPost report that Ankr's Ethereum cross-chain bridge was drained in five unauthorized withdrawals, with loss estimates ranging from about $292,000 to $303,600. The attacker reportedly reused a small, already redeemed Optimism deposit to unlock bridge-held tokens and send them to a new wallet. Blockaid, cited in TokenPost, says assets from Ankr operator wallets on Ethereum, Arbitrum and Linea were consolidated hours earlier at an address
beginning 0x4Ea before being sent through a relayer. The bridge's public pause flag remained false after the exploit, meaning the contract stayed unpaused despite the loss. Ankr had not yet published a detailed incident response or reimbursement plan in the coverage reviewed.
Watch for an official Ankr incident report clarifying the root cause, final loss figures and any reimbursement commitments, plus on-chain updates to the bridge's pause status and movements from the attacker-linked wallet.
(Source: CoinMarketCap)