GoPlus Security 🚦 (@GoPlusSecurity): 🚨 GoPlus Security Alert: -99% Crash ❗

🚨 GoPlus Security Alert: -99% Crash ❗ @hyperbridge’s Gateway contract on Ethereum was exploited via a forged cross-chain state proof attack. The attacker maliciously minted 1 billion DOT and dumped it on-chain, extracting approximately $237K in profit. The attacker bypassed verification by forging ISMP state proofs, submitting a malicious PostRequest to HandlerV1, and executing the ChangeAssetAdmin operation to transfer minting authority to a contract under their control. The attacker then minted 1 billion DOT and rapidly swapped it into 108.2 ETH (~$237K) via Odos Router + Uniswap V4 before withdrawing the funds. Attack transaction: https://etherscan.io/tx/0x240aeb9a8b2aabf64ed8e1e480d3e7be140cf530dc1e5606cb16671029401109 Attacker address: 0xC513E4f5D7a93A1Dd5B7C4D9f6cC2F52d2F1F8E7 Affected token: DOT (Relay Chain) - 0x8d010bf9C26881788b4e6bf5Fd1bdC358c8F90b8 Following the attack, the price of bridged DOT on Ethereum collapsed instantly (from ~$1.22 to ~$0.009), while native DOT on Polkadot showed only minor fluctuations.