Gravity Bridge Hit by Suspected Key Leak With About $5.4 Million Stolen

Gravity Bridge Hit by Suspected Key Leak With About $5.4 Million Stolen

According to the protocol and blockchain investigators, Gravity Bridge halted operations after a suspected signing-key compromise led to about $5.4 million in losses, adding to a broader wave of 2026 DeFi and bridge exploits.

ETH
USDT
USDC

Fact Check
Multiple independent primary news outlets (PANews, Odaily, TheBlockBeats) and the original on-chain analyst (Specter) consistently report a suspected key compromise of the Gravity Bridge on May 30, with ~$5.4M drained in USDC, WETH, USDT, and PAYG. The token list and amounts match across sources. Some residual uncertainty remains because the project team had not officially confirmed the incident at time of reporting.
Summary

Gravity Bridge, a cross-chain protocol linking Ethereum and Cosmos, confirmed a security incident after roughly $5.4 million was stolen in what investigators described as a suspected signing-key compromise. The protocol told validators and orchestrators to halt operations while the bridge remained paused during the investigation. Reported stolen assets included about $4.3 million in USDC, 274 wrapped Ether worth roughly $553,000, $434,000 in USDT, and 14.16 PAXG worth about $64,000. PeckShield said part of the funds was laundered through ChangeNOW and Binance, while the attacker still held more than 2,100 Ether worth about $4.23 million. The incident adds to a growing list of 2026 DeFi and bridge attacks, with reporting citing TRM Labs data that identified April 2026 as the most hacked month in crypto history and referencing other major exploits including Kelp DAO and Drift Protocol.

Terms & Concepts
  • signing-key compromise: A security breach in which an attacker obtains cryptographic keys used to authorize transactions, enabling forged transfers or unauthorized access.
  • wrapped Ether: A tokenized version of Ether that is designed to maintain ETH’s value while being usable in smart contracts and DeFi applications.
  • PAXG: A gold-backed crypto token intended to represent ownership of physical gold on-chain.