Hyperbridge Confirms Token Gateway Exploited, Bridge Services Suspended

Odaily News Hyperbridge posted a security update on platform X, stating that its Token Gateway was exploited on April 13, resulting in approximately $237,000 in losses on Ethereum. Bridge operations have been urgently suspended. This incident only affected DOT assets bridged to Ethereum; native Polkadot mainnet and parachain assets remain unaffected. The official statement indicates the vulnerability stemmed from a flaw in the Merkle Mountain Range (MMR) proof verification logic implemented in Solidity, which led to invalid proofs being incorrectly accepted. The attacker used this to gain administrative control over the cross-chain DOT contract, minting 1 billion fake tokens (far exceeding the actual circulating supply of about 356,000), and sold them for profit on decentralized exchanges. However, this exploit did not compromise Hyperbridge's trust-minimization based on cryptographic proofs.