XRPL Bridge Exploit Drains 200,000 XRP in Under Two Hours
A security incident on August 9th resulted in 200,000 XRP being drained from the Cororeium XRP Ledger bridge across 94 separate payments over roughly 97 minutes. The event highlights ongoing risks associated with DeFi bridge infrastructure built on the XRPL. No recovery details have been confirmed.
On August 9th, an exploit targeting the Cororeium XRP Ledger bridge resulted in the theft of approximately 200,000 XRP. The funds were removed through 94 distinct payments executed over a window of 97 minutes, suggesting a systematic and automated extraction rather than a single transaction.
Bridge protocols on the XRPL, like those across broader DeFi ecosystems, represent a persistent attack surface. By design, they hold pooled liquidity and interact with smart contract logic across chains, creating complexity that bad actors can probe for weaknesses.
The incident is a practical reminder of the custodial and smart contract risks that remain present in XRPL-adjacent DeFi applications. Users holding XRP in or near bridge contracts are advised to review their exposure. No official post-mortem or reimbursement announcement has been reported at this time.
Key facts
- •200,000 XRP drained from the Cororeium XRPL bridge
- •94 payments executed over approximately 97 minutes
- •Incident occurred on August 9th
- •No confirmed recovery or reimbursement details available