tx said its Aug. 9 XRPL bridge attack stemmed from a flaw in deposit verification rather than any compromise of cryptographic keys, relayer keys or the XRP Ledger itself. The project now puts the stolen amount at 198,715.88 XRP, while earlier public ledger analysis traced about 199,916.3 XRP leaving the reserve over 97 minutes in 94 payments, a discrepancy tx has not yet explained. The company and independent analysis said relayers accepted transactions carrying the expected bridge memo without confirming that the destination was actually the bridge vault, allowing phantom deposits to mint unbacked bridged XRP that could then be redeemed for real XRP from the reserve wallet. tx said the bridge remains halted while it reviews additional security upgrades and possible remedies for affected users, and that bridged XRP on the tx chain is not currently fully backed even though other bridged assets remain fully backed. Technical lead Reza Bashash said the stolen XRP was converted into ETH, routed to Ethereum through THORChain and later sent to Tornado Cash. tx said it traced the funds across chains and filed a complaint with the FBI's Internet Crime Complaint Center with transaction records and additional identifying information, while warning users not to rely on unofficial recovery services.