XRPThe incident remains unresolved; it stays active until recovery evidence supports closure.
On August 9, 2026, the Coreum-XRPL bridge was exploited after relayer software accepted fabricated XRP deposits, creating unbacked balances that were withdrawn against real bridge reserves. First-party and corroborating reports estimate approximately $200,000 of XRP was removed—99.7% of the bridge reserve—in under two hours. No canonical incident transaction hash was included in the preserved sources.
No canonical incident transaction was disclosed in the preserved sources. Philidor does not substitute an unrelated contract or wallet transaction.
Source-backed incident record anchored to a preserved first-party issuer disclosure. Philidor applies its own severity policy but does not infer an undisclosed loss amount or transaction.
