#bridge-security News & Analysis

Attacker mints $1 billion Polkadot tokens on Ethereum, ends up stealing just $250,000

An attacker exploited a vulnerability in a cross-chain bridge contract by forging a state proof message to gain admin control over bridged Polkadot (DOT) tokens on Ethereum. Despite minting $1 billion in fake tokens, the attacker only managed to extract approximately $250,000 in value before liquidity constraints and market impact limited further sales.