{"id":83695,"date":"2026-06-01T08:39:46","date_gmt":"2026-06-01T01:39:46","guid":{"rendered":"https:\/\/hbbgroup.net\/cosmos-based-gravity-bridge-halts-bridge-after-reported-5-4m-exploit\/"},"modified":"2026-06-01T08:39:46","modified_gmt":"2026-06-01T01:39:46","slug":"cosmos-based-gravity-bridge-halts-bridge-after-reported-5-4m-exploit","status":"publish","type":"post","link":"https:\/\/hbbgroup.net\/zh\/cosmos-based-gravity-bridge-halts-bridge-after-reported-5-4m-exploit\/","title":{"rendered":"Cosmos-based Gravity Bridge halts bridge after reported $5.4M exploit"},"content":{"rendered":"<div data-testid=\"post__body\">\n<p>Gravity Bridge, a decentralized blockchain facilitating cross-chain transfers between Ethereum and Cosmos, was reportedly drained of roughly $5.4 million, prompting validators to halt the bridge.<\/p>\n<p>Onchain analyst Specter first flagged the unusual outflows in a Saturday <a href=\"https:\/\/x.com\/SpecterAnalyst\/status\/2060613063816941820?s=20\" rel=\"nofollow noopener\">post<\/a> on X, revealing that the bridge contract key may have been compromised. \u201cIt appears the Gravity Bridge contract key may have been compromised, resulting in the theft of $5.4M,\u201d Specter wrote.<\/p>\n<p>Security firm PeckShield also <a href=\"https:\/\/x.com\/PeckShieldAlert\/status\/2060636956984594521?s=20\" rel=\"nofollow noopener\">confirmed<\/a> the exploit in a post, breaking down the stolen assets as approximately $4.3 million in USDC (USDC), 274 Wrapped Ether (WETH) worth roughly $553,000, $434,000 in USDt (USDT) and 14.164 PAX Gold (PAXG) tokens worth about $64,000.<\/p>\n<figure><img loading=\"lazy\" alt width=\"896\" height=\"1054\" src=\"https:\/\/s3-images.ctmedia.io\/media\/content\/pecks.png\" decoding=\"async\"><\/figure>\n<p><em>Source: PeckShield<\/em><\/p>\n<p>PeckShield reported that a portion of the haul had already been laundered through instant-swap service ChangeNow and through Binance, while the theft wallet was still holding around 2,102 ETH worth approximately $4.23 million at the time of its report.<\/p>\n<p><em><strong>Related: <\/strong><\/em><a href=\"https:\/\/cointelegraph.com\/news\/stakedao-vsdcrv-attacker-liquidity-91k\"><em><strong>StakeDAO exploit creates 5.4 trillion vsdCRV but nets only $91K<\/strong><\/em><\/a><\/p>\n<h2>Gravity Bridge acknowledges attack<\/h2>\n<p>Gravity Bridge <a href=\"https:\/\/x.com\/gravity_bridge\/status\/2060715098809970741\" rel=\"nofollow noopener\">acknowledged<\/a> the incident on X without detailing what went wrong. \u201cThere was an unfortunate incident on Gravity,\u201d the team wrote, adding that validators \u201cshould halt their validators and orchestrators while this incident is being investigated.\u201d In a follow-up post, the team confirmed the bridge had been halted.<\/p>\n<p>Gravity Bridge allows tokens to move freely in both directions, from Ethereum to Cosmos wallets and DEXs like Osmosis, and from Cosmos-based blockchains back to Ethereum platforms like Uniswap. Unlike bridges that rely on centralized multi-signatures or private node groups, it uses its full validator set to authorize transfers, making it one of the more decentralized bridge designs in the space, <a href=\"https:\/\/www.gravitybridge.net\/faq\" rel=\"nofollow noopener\">according<\/a> to its website.<\/p>\n<p>Gravity Bridge\u2019s native token is Graviton (GRAV), used by validators to secure the bridge. The token is currently trading at $0.0007053, down 4% over the past day, <a href=\"https:\/\/coinmarketcap.com\/currencies\/grav\/\" rel=\"nofollow noopener\">according<\/a> to data from CoinMarketCap.<\/p>\n<p><em><strong>Related: <\/strong><\/em><a href=\"https:\/\/cointelegraph.com\/news\/all-defi-unsafe-ai-security-debate\"><em><strong>\u2018All DeFi unsafe\u2019 claim sparks AI security debate after April hack surge<\/strong><\/em><\/a><\/p>\n<h2>Bridge exploits are spooking institutions<\/h2>\n<p>As Cointelegraph reported, JPMorgan analysts have <a href=\"https:\/\/cointelegraph.com\/features\/defi-hacks-institutional-confidence-risks-outpace-yields\">flagged bridge security<\/a> as a major challenge in an April research note, questioning whether DeFi can scale to meet institutional demand. The concern comes amid the recent Versus-Ethereum bridge attack, which was the eighth major bridge exploit of 2026, with cumulative losses across those incidents reaching $328.6 million.<\/p>\n<p>Following the <a href=\"https:\/\/cointelegraph.com\/news\/layerzero-kelp-exploit-aave-loss\">KelpDAO breach in April<\/a>, which drained roughly $290 million and was attributed to North Korea\u2019s Lazarus Group, total value locked across DeFi fell from nearly $100 billion to around $86 billion in just two days, with outflows hitting pools that had no direct exposure to the compromised assets.<\/p>\n<p><em><strong>Asia Express: <\/strong><\/em><a href=\"https:\/\/cointelegraph-magazine.com\/north-korea-denies-crypto-hacks-upbits-bank-tests-ripple-asia-express\/\" rel=\"nofollow noopener\"><em><strong>North Korea denies crypto hacks, Upbit\u2019s bank tests Ripple<\/strong><\/em><\/a><\/p>\n<\/div>\n<p>Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph\u2019s <a href=\"https:\/\/cointelegraph.com\/editorial-policy\">Editorial Policy<\/a> and aims to provide accurate and timely information. Readers are encouraged to verify information independently. <\/p>","protected":false},"excerpt":{"rendered":"<p>Gravity Bridge, a decentralized blockchain facilitating cross-chain transfers between Ethereum and Cosmos, was reportedly drained of roughly $5.4 million, prompting [&hellip;]<\/p>","protected":false},"author":5,"featured_media":83696,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[220],"tags":[],"class_list":["post-83695","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tien-dien-tu"],"acf":[],"_links":{"self":[{"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/posts\/83695","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/comments?post=83695"}],"version-history":[{"count":0,"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/posts\/83695\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/media\/83696"}],"wp:attachment":[{"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/media?parent=83695"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/categories?post=83695"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hbbgroup.net\/zh\/wp-json\/wp\/v2\/tags?post=83695"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}