Hacker mints one billion Polkadot (DOT) and sells tokens. Exploit in Hyperbridge – Bitcoin.pl

Blockchain once again reminded us that bridges between networks are one of the riskiest elements of the entire Web3 ecosystem. This time, the target is Hyperbridge – an interoperability protocol built on the basis of Polkadot. Effect? A billion DOT tokens minted out of thin air and the hacker’s quick profit.

A hacker exploits the loophole and steals the loot?

Security firm CertiK was among the first to describe the details of the attack. A vulnerability in the Hyperbridge gateway contract allowed a hacker to spoof messages and gain full administrative control of the DOT token contract on Ethereum.

After taking control, the attacker minted exactly 1 billion bridged DOT tokens on Ethereum and then immediately sold them. Profit? Approximately $237,000. For an exploit of this scale – a relatively modest amount, but the image damage is incomparably greater.

An Onchain Lens analyst confirmed the course of the attack: before the tokens were minted and released to the market, control over the contract was changed to the hacker’s address. The effect was immediate – the price of bridged DOT collapsed $1.22 to fractions of a cent. Classic dump, only exceptionally brutal.

Polkadot responds

Polkadot officially commented on the matter by publishing a message on the X platform. The network emphasized that the exploit only applies to DOT tokens on Ethereum transferred via Hyperbridge – the native Polkadot ecosystem and tokens bridged by other methods remain intact. Hyperbridge has been temporarily suspended until the incident is resolved.

Despite these assurances, the market reacted nervously. The native DOT rate dropped by approx 4%to the level $1.18 from previous $1.22. Investors apparently prefer to sell first and ask questions later.

Stock exchanges react to the situation with Hyperliquid

The situation echoed on Asian markets. South Korean exchanges Upbit and Bithumb have temporarily suspended DOT deposits and withdrawals, citing signals of a security incident detected. This is standard precautionary protocol, but it always acts as a cold shower for market sentiment.

Application?

Cross-chain bridges remain the weakest link in DeFi. Hyperbridge is another example that even advanced interoperability infrastructure can hide critical vulnerabilities. Until audits and tests keep up with the pace of protocol development, there will be more similar stories. The hacker earned PLN 237,000. USD. The industry paid much more because of trust.