Theblock.Co Polkadot Hyperbridge Exploit: 1 Billion DOT Minted and Sold
Article Content
- •1 billion unauthorized DOT tokens were minted and sold due to a Hyperbridge exploit.
- •The attack did not affect the native Polkadot ecosystem or DOT bridged through other protocols.
- •Hyperbridge has been suspended for investigation following the incident.
On April 13, 2026, a vulnerability in the Hyperbridge gateway contract on Ethereum allowed an attacker to mint 1 billion unauthorized Polkadot (DOT) tokens. The exploit was facilitated by forging messages to gain administrative control over the bridged DOT token contract. The attacker subsequently sold the minted tokens for approximately $237,000 worth of Ether. This incident specifically affected DOT tokens bridged to Ethereum, while the native DOT and Polkadot ecosystem remained secure. The Hyperbridge protocol has been paused for investigation and remediation. The exploit highlights ongoing vulnerabilities in cross-chain interoperability solutions. The incident has raised concerns about the security of decentralized finance (DeFi) infrastructures. Security firms CertiK and BlockSec are investigating the attack vector and its implications.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (23)
Following this threat?
Track Bithumb in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…