Hyperbridge: The vulnerability in this attack incident originates from a flaw in the Merkle proof verification logic

By: rootdata|2026/04/13 23:02:36

The blockchain interoperability protocol Hyperbridge disclosed details of the previous DOT attack incident, resulting in a loss of approximately $237,000. The root of the vulnerability lies in the HandlerV1 contract's VerifyProof() function, which lacks input validation and does not verify the leaf_index leafCount, allowing attackers to forge Merkle proofs.

Using this, the attacker gained administrator privileges for the DOT token bridging contract on Ethereum, subsequently minting 1 billion bridged DOT (which is about 2800 times the legitimate circulation of approximately 356,000) and cashing out on decentralized exchanges. Hyperbridge stated that it is currently working with security partners to trace the funds, and cross-chain functionality will remain suspended until the investigation is completed.

-- Price

Crypto influencer and racing enthusiast Carl Moon finished third in the Ferrari Challenge Le Mans Coppa Shell class, marking his best result of the year. As his racing partner and sponsor, WEEX celebrates this remarkable achievement and continues to lead crypto’s journey beyond boundaries, uniting the innovation of digital assets with the passion of motorsport.

A16Z: The sun bears witness, SpaceX is worth 7.5 trillion

A deep analysis of Musk's ultimate grand vision: how SpaceX, xAI, and Tesla are deeply intertwined, using space AI data centers and Starships to gradually turn the sci-fi fantasies of Mars colonization and multi-planetary civilization into reality.

The stablecoin positioning battle escalates: When compliance is just a ticket to entry, will USD1 become the biggest winner?

How does the GENIUS Act reshape the stablecoin landscape?

Can the CLARITY Act Become Law by July 4? Everything You Need to Know About the Final Battle

The CLARITY Act has cleared a major Senate hurdle, but the hardest battle is still ahead. With the July 4 deadline approaching, can the White House finally pass its biggest crypto regulation bill? Find the clues in our exclusive analysis below.

How to exit after asset tokenization?

Currently, three models have emerged, aimed at providing instant exit routes for tokenized real-world assets. Their differences lie in: who holds the funds required for exit, how efficiently the funds operate, and the extent to which this model can be scaled across different asset types.

The foundation of SpaceX's trillion-dollar valuation: Who is dividing Musk's annual capital expenditure of tens of billions?

SpaceX Supply Chain Revealed: The Invisible Gold Mine Behind the Trillion-Dollar "Space Dream," from Nvidia's Computing Power Monopoly to China's Sole Supplier of Special Materials, these overlooked water-selling talents are the true wealth creation engine.

France vs Senegal World Cup 2026: Mbappe’s New Era Begins Against a Historic Rival

France vs Senegal World Cup 2026 preview: Can Mbappe lead France past Senegal after the shocking 2002 World Cup defeat? Full team news, predicted lineups, key battles, and WEEX's exclusive match prediction.

SharpLink CEO: How to understand that Ethereum developers have just surpassed 1 million?

The most important question in the cryptocurrency industry is not which chain is the fastest, but rather where top builders choose to build in the long term. Ethereum has just surpassed one million cumulative developers; what does this number mean?

Morning Report | MiCA grace period expires on July 1; Kalshi's trading volume in the first week of the World Cup breaks $5.1 billion, setting a record

Overview of Important Market Events on June 15

What is the connection between Huang Zheng of Pinduoduo and blockchain?

From Pinduoduo's "reverse insurance" to blockchain's smart contracts, this article explains how Huang Zheng's underlying logic uses "certainty" rules to reshape the flow of wealth for ordinary people.

Morning Report | Prediction market platforms like Kalshi and Polymarket jointly sue Kentucky over 14.25% trading tax; Bridgewater founder discusses decision-making in the AI era: principled thinking should run parallel to AI, human insight remains irre...

Overview of Important Market Events on June 15

Claude enforces "facial recognition for household registration," starting in July, no ID card means no access?

Anthropic has issued an urgent notice that Claude users may face real-name verification in July. From now on, every time you use Claude, you may need to be prepared with your ID.

On the day of SpaceX's IPO, the first real test of the three perpetual mechanisms

The price has been discovered, and the market surrounding the price is still under construction.

Value Distribution of Stablecoins

The issuance layer obtains user funds and takes the largest profit margin; the two middle layers rely on traffic, distribution commissions, and underlying infrastructure; the application layer enjoys convenience but has no bargaining power.

Galaxy Deep Dive: Is the Bitcoin Four-Year Cycle Still Valid?

Galaxy Research believes that the four-year cycle of Bitcoin is still valid, but the amplitude of the cycle is shrinking. This round's peak is milder, which means that even if the pullback continues, the bottom may be higher than the extreme levels of past cycles.