Gravity Bridge Hacked: $5.4M Drained in Key Compromise, Bridges Remain Vulnerable
Gravity Bridge suffered a $5.4 million exploit, not from a smart contract bug, but a compromised signing key. This attack highlights the persistent, critical vulnerabilities plaguing cross-chain bridges, a recurring nightmare for the crypto ecosystem.
Gravity Bridge just got hit for $5.4 million. The damage wasn't a fancy smart contract exploit; it was a straight-up compromised signing key. Attackers nabbed $4.3 million in USDC, 274 ETH, and a chunk of USDT, proving bridges are still the Wild West of crypto security.
The hacker moved fast, swapping stablecoins for ETH and laundering some of the loot through ChangeNow and Binance. This isn't a new script. Bridges are the choke points, and when those keys get compromised, the funds vanish like smoke.
This exploit underscores a brutal reality: bridges remain crypto's Achilles' heel. With $11.5 million TVL before the drain, Gravity Bridge was a target. The pattern of key failures and massive bridge hacks, totaling hundreds of millions in May alone, shows no sign of stopping. Until this is fixed, expect more pain.