An attacker exploited Hyperbridge's Ethereum gateway contract on April 13, minting 1 billion bridged DOT tokens in a single transaction and dumping them for approximately 108 ETH, worth roughly $237,000. The incident leads today's top 5 crypto news roundup as exchanges suspended DOT transfers and the broader market sat deep in "Extreme Fear" territory.
DOT Bridge Exploit on Ethereum Dominates the 24-Hour Crypto News Cycle
The exploit targeted Hyperbridge, a cross-chain bridge connecting Polkadot to Ethereum. According to blockchain security firm CertiK, the attacker used a forged message to change the admin of the Polkadot token contract on Ethereum, then minted 1 billion bridged DOT and sold them into thin liquidity.
Limited on-chain liquidity for bridged DOT capped the attacker's realized proceeds at 108.206 ETH. At the time of the transaction, April 13 at 03:55:23 UTC, that amounted to roughly $237,000, a fraction of what 1 billion DOT would be worth at native market prices.
ON-CHAIN DATA
- Transaction hash: 0x240aeb...401109
- Exploit proceeds: 108.206 ETH (~$237,000)
- Bridged DOT minted: 1,000,000,000
- Timestamp: April 13, 2026, 03:55:23 UTC
Polkadot's official forum confirmed that the issue affected only DOT on Ethereum bridged through Hyperbridge. Native DOT and the wider Polkadot ecosystem were not impacted. Hyperbridge was paused immediately while the team investigated.
The Hyperbridge mainnet documentation lists the implicated contracts: the Ethereum HandlerV1 at address 0x6C84eDd2A018b1fe2Fc93a56066B5C60dA4E6D64 and the TokenGateway at 0xFd413e3AFe560182C4471F4d143A96d3e259B6dE.
South Korean exchange Bithumb responded by publishing a DOT risk notice that directly referenced the exploit transaction. DOT deposits and withdrawals were suspended on the platform at the time of the notice, and Bithumb noted that DAXA member exchanges may take additional investor-protection measures including caution notices or trading warnings.
#CertiKInsight ?
— CertiK Alert (@CertiKAlert) April 13, 2026
We have seen an exploit on the @hyperbridge gateway contract. https://t.co/h27iDm1JGd
The attacker slipped through a forged message to change the admin of Polkadot token contract on Ethereum and profited ~$237K from minting and selling 1B tokens.
Stay… pic.twitter.com/3t2n4uq5hy
Source: @CertiKAlert on X
According to unconfirmed third-party technical reconstructions, the likely root cause involved an MMR proof replay or a missing proof-to-request binding issue in Hyperbridge's verification path. Hyperbridge had not published an official postmortem or final root-cause analysis as of April 14.
The Rest of the Top 5 Crypto Stories to Watch Today
The original 24-hour roundup headline listed five stories. The DOT bridge exploit dominated as the lead item, drawing 429 views and 8 reposts on social platforms. The remaining stories covered additional market-moving developments across crypto.
The second item in the roundup referenced "Michael," though the full headline was truncated. Items three through five were not visible in the original social post. As confirmed details emerge on the remaining stories, traders should monitor official project channels and exchange notices for updates.
Why These 24-Hour Crypto Headlines Matter for Market Sentiment
The exploit landed during a period of elevated anxiety. The Fear & Greed Index sat at 12, deep in "Extreme Fear" territory. DOT traded at $1.21 with a market cap of roughly $2.04 billion and 24-hour volume of $313 million, reflecting a 0.77% decline over the prior day.
Bridge exploits remain one of the highest-impact attack vectors in crypto. While the $237,000 in realized proceeds was modest relative to DOT's total market cap, the ability to mint 1 billion tokens in a single transaction exposed a critical vulnerability in Hyperbridge's verification logic. The gap between the notional value of minted tokens and the actual proceeds highlights how thin bridged-token liquidity can limit exploit damage.
For traders and protocol operators, the immediate watchlist includes Hyperbridge's forthcoming postmortem, whether Bithumb and other DAXA-member exchanges lift their DOT transfer suspensions, and any further contract audits across the Polkadot bridge ecosystem.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.