Was the Polkadot (DOT) main network affected?

No, the exploit only affected the bridged (wrapped) DOT on Ethereum. The native Polkadot relay chain and its original DOT token were not compromised.

How did the attacker manage to mint 1 billion DOT tokens?

According to CertiK, the attacker used a forged message to gain admin control of the token contract via the Hyperbridge gateway. This allowed them to mint tokens without proper authorisation.

What is a bridged or wrapped token like bridged DOT?

A bridged token is a version of a cryptocurrency that exists on another blockchain, typically backed 1:1 by the original asset. It allows assets like DOT to be used on networks such as Ethereum.

Why are cross-chain bridges vulnerable to exploits?

Bridges rely on complex smart contracts and message validation systems, which can be exploited if there are flaws. Attackers often target admin controls or verification mechanisms to mint or drain assets.

How much did the attacker actually profit?

The attacker netted around 108.2 ETH, approximately $237,000. Despite minting 1 billion tokens, liquidity constraints likely limited how much value they could extract.

Why didn’t the attacker make more money from 1 billion tokens?

Because the bridged token likely had limited liquidity, large sell orders caused rapid price collapse. This is common in exploits where attackers mint large amounts of low-liquidity assets.

What does this mean for Polkadot (DOT) investors?

The core Polkadot network remains secure, which limits direct impact on DOT holders. However, the incident may affect sentiment and trust in ecosystem infrastructure like bridges.

Bridged Polkadot exploit mints 1B tokens on Ethereum

Q: What happened in the Polkadot bridge exploit?

An attacker exploited a bridged version of Polkadot (DOT) on Ethereum, minting 1 billion tokens and dumping them in a single transaction. The attacker then converted the tokens into 108.2 ETH, worth about $237,000.

Written by Heidi Cuthbert Published Apr. 13 2026Last Updated Apr. 13 2026

Polkadot’s bridged DOT token on Ethereum has reportedly been exploited, with an attacker minting 1 billion tokens and dumping them in a single transaction.

Onchain data from Lookonchain shows the attacker converted the minted tokens into 108.2 ETH, worth roughly $237,000 at the time.

CertiK said the exploit targeted the Hyperbridge gateway contract, where a forged message allowed the attacker to gain admin control and mint tokens.

The breach affected only the bridged version of DOT on Ethereum, not the native Polkadot relay chain or its original token.

The incident highlights ongoing vulnerabilities in cross-chain infrastructure, particularly in bridge contracts that manage wrapped assets across networks.

Neither Polkadot nor Hyperbridge had issued an official response at the time of reporting, with the situation still developing.

At the time of reporting, Polkadot price was $1.19.