On September 19, 2021, pNetwork's cross-chain bridge was exploited when an attacker crafted fraudulent peg-out event logs. The Rust event-log processor failed to validate that requests originated from authorized pNetwork contracts, processing the fake withdrawal requests. The attacker stole 277 BTC (wrapped to BSC) worth approximately $13M.