On August 9, 2026, the Coreum Bridge connecting XRPL and Coreum was exploited via a flaw in its bridge logic, resulting in a loss of approximately $200,000. No dedicated post-mortem has been published.

On August 9, 2026, the cross-chain bridge connecting the XRP Ledger and Coreum (now tx) was exploited. The attacker abused a flaw in the deposit-verification/relayer logic by creating fake deposits (self-transfers of the bridge’s own wrapped tokens with valid memos), tricking the relayers into authorizing real XRP withdrawals from the bridge’s reserve. Nearly 200,000 XRP (~$200,000) was drained in 94 multisig transactions over 97 minutes.