Bridged Polkadot Attacker Moves $269,000 to Tornado Cash

Bridged Polkadot Attacker Moves $269,000 to Tornado Cash

Hyperbridge states that the April 13 Token Gateway exploit loss estimate was raised to about $2.5 million, with affected incentive pools spanning Ethereum, Base, BNB Chain and Arbitrum while native Polkadot DOT was not impacted.

ETH
BNB
DOT

Fact Check
The exploit mechanics in the statement are strongly supported by the fetched Yahoo Finance report, which says Hyperbridge was exploited on April 13, 2026 via forged cross-chain messages and that roughly 1 billion bridged DOT were minted on Ethereum after the attacker gained admin control over the token contract. That directly matches the statement's core description. The PANews article, citing Arkham, supports the related claim that the attacker later moved the stolen funds to Tornado Cash and places the stolen amount at about $269,000. The main uncertainty is the statement's more specific claim that Hyperbridge itself raised the loss estimate to about $2.5 million. In this run, I was unable to fetch a Hyperbridge official page or the cited X posts directly, so that exact revised estimate is not validated from a primary source here. Because the core facts are corroborated but the $2.5 million update lacks a fetched primary confirmation, the overall claim is best assessed as likely true rather than fully confirmed.
    Reference1
Summary

Hyperbridge raised its preliminary loss estimate for the April 13 Token Gateway exploit from about $237,000 to about $2.5 million. The project said the attack affected incentive pools on Ethereum, Base, BNB Chain and Arbitrum, while native Polkadot DOT and other Hyperbridge bridge products were not affected. Earlier updates said the attacker forged cross-chain messages, extracted about 245 ETH and minted 1 billion bridged DOT. Hyperbridge has also said cross-chain functions will remain paused until an independently audited patch is completed.

Terms & Concepts
  • cross-chain messages: Data passed between blockchains to verify actions such as transfers or minting; if forged, they can enable unauthorized asset creation or withdrawals.
  • bridged DOT: A tokenized representation of Polkadot's DOT on another chain, typically created through a bridge so it can be used outside its native network.
  • on-chain: Activity or data recorded directly on a blockchain, allowing transactions and wallet movements to be publicly traced.