Gravity Bridge, the cross-chain protocol connecting Cosmos-based networks to Ethereum, was drained of $5.4 million today in what appears to be a targeted exploit. The attacker moved quickly to launder a portion of the stolen funds, and still holds over $4.2 million in ETH at the time of writing.
The speed of the laundering attempt suggests a sophisticated actor familiar with on-chain obfuscation techniques — a pattern increasingly common in cross-chain bridge exploits, which have become one of the most reliably targeted attack surfaces in DeFi.
Gravity Bridge has not yet issued a formal post-mortem. Users with funds bridged through the protocol should monitor official channels closely until the attack vector is identified and patched.
CoinTelegraph