tx (formerly Coreum) XRPL bridge drained of 199,916 XRP (2026-08-09): attacker's two XRP Ledger receiving accounts and Ethereum cash-out wallet
- Scam type: Hack
- Chain: XRP Ledger
- Project or site name: tx (Coreum) XRPL bridge
- Incident date: 2026-08-09
- Reported: 2026-10-24
- Last updated: 2026-10-24
On 2026-08-09 an attacker drained the XRP Ledger reserve of the bridge between the XRP Ledger and the tx chain (formerly Coreum). tx said the bridge software registered transactions that never delivered XRP to the bridge as deposits and minted bridged XRP against them. The attacker then redeemed that unbacked XRP for real XRP from the reserve. tx halted the bridge, patched the code and filed a complaint with the FBI's IC3 (CoinDesk, https://www.coindesk.com/tech/2026/08/12/xrp-bridge-drained-for-usd200-000-after-software-mistook-fake-deposits-for-real-ones; Decrypt,…
Other addresses in this report: rfXSfH2q4zhGWdw45nYcWfjvFN5ZfwE1U6, 0xad363e11007f98b93790ba3abae332402b316430