Tx Halts XRPL Bridge After 198,715 XRP Theft

The security breach stemmed from a failure in the bridge's relayer logic rather than the XRP Ledger itself. Attackers exploited cross-currency payment features to trick the system into registering deposits that never actually arrived at the bridge vault. Once the relayers validated these false inputs, the attacker withdrew genuine XRP from the reserve wallet. Technical lead Reza Bashash confirmed that the stolen assets were subsequently converted into ETH, routed through THORChain, and laundered via Tornado Cash.

While other bridged assets remain fully collateralized, the XRP reserve currently lacks complete backing. Tx has filed a formal complaint with the FBI’s Internet Crime Complaint Center, providing transaction logs and identifying data. The bridge remains offline indefinitely as developers implement security patches and finalize a plan for user reimbursement. The team has advised users to avoid unofficial recovery services while they evaluate how to restore the bridge's integrity.