Altcoins News

Story: Gravity Bridge Down After $5.4 Million Signing Key Breach

By Steven Anderson

1 / 15

How the Signing Key Got Compromised. That's the question nobody has answered yet. Signing keys are basically the master credential for…

2 / 15

What Validators Did and Why It Mattered. Halting the bridge the moment the compromise was spotted probably stopped things from getting worse.

3 / 15

What Comes Next for the Platform. Before Gravity Bridge comes back online, a few things probably need to happen.

4 / 15

Gravity Bridge is offline. Validators pulled the plug after a suspected signing key compromise drained roughly $5.

5 / 15

The breach itself is pretty straightforward in outline, murky in specifics. Someone — or something — got hold of the signing key that authorizes transactions on the bridge.

6 / 15

That's the question nobody has answered yet. Signing keys are basically the master credential for a bridge like this — they authorize movement of assets between chains.

7 / 15

Cross-chain bridges have had a rough few years broadly speaking. The attack surface is wide, the stakes are high, and the signing key model has been a weak point across multiple…

8 / 15

The investigation is active. The team is working with security experts to trace exactly how the key was obtained, whether through a phishing attack, an insider issue,…

9 / 15

Halting the bridge the moment the compromise was spotted probably stopped things from getting worse. It's not a given that validators react that quickly.

10 / 15

Read also: Texas Man Faces SEC Charges Over $12.3M Fake AI Trading Bot Scam

11 / 15

The halt is temporary, officially. Operators say they'll release a detailed report once the investigation wraps — covering how the breach happened, what the exact scope of the…

12 / 15

Stakeholders are being told to watch official channels. That's probably the right advice, and also kind of the only advice available right now.

13 / 15

Before Gravity Bridge comes back online, a few things probably need to happen. The investigation has to close with a clear explanation of the vector.

14 / 15

It's worth noting that the remaining funds are the immediate focus. The team is trying to secure what's left, which means the $5.

15 / 15

Read also: Coinbase Becomes First U.S. Exchange to Win Global Perps Approval

The Currency Analytics

Want the full story?