Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Ankr Ethereum Cross-chain Bridge Smart Contract Vulnerability: $304.50K Reported Loss

·Source-attributed incident record

Incident Overview

Ankr’s Ethereum cross-chain bridge was exploited. The attacker submitted five forged cross-chain receipts referencing the same legitimate Optimism transaction, altering the recipient, token, and amounts. All receipts carried valid signatures from the bridge’s trusted consensus signer, allowing the withdraw() function to release assets without verifying against actual source-chain events. Loss ≈ $304.5k.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2119720284093890615 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodHot Wallet Key Compromise
    Reported loss$ 856,000
  2. Incident date
    Attack methodAccount Credentials Stolen
    Reported loss$ 133000000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 783,100
  4. Incident date
    Target

    Binance

    Attack methodDevOps Engineer’s Laptop Compromised
    Reported loss$ 6,300,000,000
  5. Incident date
    Target

    ACryptoS

    Attack methodSmart Contract Vulnerability
    Reported loss$ 665,429