Coreum跨链桥遭攻击，XRP储备损失99.7%
Coreum bridge loses 99.7% of XRP reserve in $200K exploit
加密安全事件，涉及跨链桥漏洞与资产损失，建议关注Coreum及tx链上资产风险，留意后续调查进展。
An attacker drained 99.7% of the XRP reserve backing the Coreum cross-blockchain bridge on August 9 by conjuring fake evidence of deposits that fooled the bridge’s own operators into authorizing real withdrawals.
8月9日，一名攻击者通过伪造存款证据，骗过了Coreum跨链桥自身的操作员，使其授权了真实的提款，从而抽干了该桥XRP储备金的99.7%。
Nobody stole anyone’s private key to execute the clever hack. Instead, Coreum’s bridge liquidity account paid out 199,916 XRP worth over $200,000 across 94 transactions, each one carrying a majority of signatures from its own relayers.
没有人窃取任何人的私钥来实施这一巧妙攻击。相反，Coreum的桥流动性账户在94笔交易中支付了199,916 XRP，价值超过20万美元，每笔交易都带有其自身中继者的大多数签名。
Hours later, Coreum was shocked to discover it held just 493 XRP worth roughly $500.
数小时后，Coreum震惊地发现其仅持有493 XRP，价值约500美元。
A memo was all Coreum’s bridge required
Coreum的桥只需要一份备忘录
The relayer software watched the bridge account’s history for payments carrying a Coreum recipient memo.
中继软件监视桥账户的历史记录，寻找带有Coreum接收方备忘录的付款。
It never verified that payment destination. A seemingly valid memo existed, yet the destination was the hacker’s wallet.
它从未验证付款目的地。看似有效的备忘录存在，但目的地却是黑客的钱包。
Ostensibly independent operators reached identical conclusions and signed off on all of the withdrawals because they were all running the same buggy code.
表面上独立的操作员得出了相同的结论，并批准了所有提款，因为他们都在运行相同的错误代码。
Bridge hacks back in vogue as Verus exploit brings 2026 total to $329M
桥攻击再次流行，Verus漏洞使2026年总损失达到3.29亿美元
Read more: XRP Ledger generated less than $400 in fees yesterday
阅读更多：XRP Ledger昨日产生的手续费不足400美元
TX confirms an FBI report
TX确认了FBI报告
TX, a brand that absorbed both the Coreum and Sologenic communities in February, confirmed the incident, and admitted the software “incorrectly registered transactions that never actually delivered any XRP to the bridge as deposits, and minted bridged XRP on the tx chain against them.”
TX品牌于2月吸收了Coreum和Sologenic社区，确认了这一事件，并承认软件“错误地将从未实际向桥交付任何XRP的交易登记为存款，并据此在tx链上铸造了桥接XRP。”
The same statement said the bridge had undergone “multiple internal and third-party audits prior to deployment.”
同一份声明称，该桥在部署前经过了“多次内部和第三方审计”。
It also conceded that bridged XRP on the tx chain “is not currently fully backed,” and confirmed a complaint had gone to the FBI.
它还承认tx链上的桥接XRP“目前并未完全得到支持”，并确认已向FBI提交投诉。
The price of XRP dipped below $1 yesterday, its first sub-dollar print since November 2024. The coin has lost 45% of its value this year, and is 74% below its all-time high.
XRP价格昨日跌破1美元，这是自2024年11月以来首次低于1美元。该币今年已下跌45%，较历史高点下跌74%。
Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.
有线索？请通过Protos Leaks安全地发送电子邮件给我们。欲了解更多有见地的新闻和调查，请在X、Bluesky和Google News上关注我们，或订阅我们的YouTube频道。
The post Coreum bridge loses 99.7% of XRP reserve in $200K exploit appeared first on Protos.
帖子“Coreum桥在20万美元漏洞中损失99.7%的XRP储备”首先出现在Protos上。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力