Cross-Chain Bridge Long Hacked for 46.79 WETH, No User Funds Lost

The cross-chain bridge Long released a report on the WETH hacking incident on September 14, revealing that attackers stole 46.7928 WETH (approximately $118,000) from the Robinhood Chain treasury. The incident occurred at 07:07 UTC, and the platform confirmed that there were no losses of user funds, as the treasury has been fully replenished with platform revenue. The bridge has been rebuilt, reinforced, and continues to operate, although some orders were delayed by several hours during the recovery period. The bridge's keeper read the burn events on Arc via RPC to release the assets. At the time of the incident, the official mainnet endpoint was not online, relying instead on public RPC. After the backup endpoint was overloaded, the main endpoint provided the keeper with forged withdrawal event logs for a short period, which did not exist on Arc. The keeper's protection against replay and double-spending did not question the data source, leading to the release of the WETH. During the same period, three other forged withdrawals were all reverted on-chain, with the forged events entering through the RPC channel, and the contract, keys, and treasury were not breached.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.