Cross-Chain Protocol Gravity Bridge Suffers $5.4 Million Attack — Details

Summary

Gravity Bridge, a Cosmos-native cross-chain bridge, was hit by a suspected signing-key compromise that drained about $5.4 million in crypto assets. Reported losses included roughly $4.3 million in USDC, $553,000 in wrapped Ether, $434,000 in USDT, and $64,000 in PAXG. Some stolen funds were laundered through ChangeNOW and Binance, while more than 2,100 ETH remained in the attacker’s control. The protocol confirmed the attack and paused bridge operations while validators and orchestrators investigated. The incident highlights a common bridge weakness: if validator signing keys are stolen, forged transfers can be treated as valid. It also adds to a wave of major DeFi and bridge exploits in 2026.