How Did the Attacker Gain Contract Control?
On April 13, 2025, on-chain monitoring by CertiK detected an exploit targeting the Hyperbridge cross-chain gateway contract on Ethereum. The attacker leveraged a vulnerability to craft forged messages, successfully manipulating the admin permissions of the Polkadot bridged token contract and gaining full control over it.
1 Billion DOT Minted — Profit Barely Reached $237K
With control secured, the attacker immediately minted one billion bridged DOT tokens and dumped the entire supply onto the market. However, on-chain liquidity for this asset was extremely thin. The massive sell pressure instantly crashed the token price from approximately $1.22 to near zero. Despite the enormous scale of the mint, the attacker ultimately extracted only around $237,000 in actual profit.
Why Was the Profit So Much Lower Than the Mint Size?
The gap comes down to one factor: liquidity. On-chain buy-side depth was nowhere near sufficient to absorb such a flood of tokens, leaving the vast majority of newly minted assets effectively worthless. The incident serves as a stark reminder that controlling a contract does not equate to extracting value — market depth acts as a hard ceiling on what an attacker can realistically monetize.
Bridged Asset Attacked, Not the Polkadot Native Chain
It is important to note that this attack targeted the bridged (wrapped) version of DOT on Ethereum, which is entirely separate from native DOT on the Polkadot mainnet. The Polkadot network itself was not compromised. As of the time of writing, neither the Hyperbridge team nor the Polkadot Foundation has issued an official statement or incident response.
How Can Teams Detect Cross-Chain Threats in Real Time?
This incident underscores the critical need for continuous on-chain monitoring of bridge contracts and their associated assets. For institutions, exchanges, and DeFi protocols, deploying a robust KYT solution to track suspicious asset flows in real time is no longer optional — it is essential. Trustformer KYT delivers precision on-chain transaction monitoring and risk alerting, capable of flagging abnormal minting events, permission changes, and large-scale token dumps at early stages, enabling teams to respond before losses escalate.