Gravity Bridge (2026) — Crypto Hack
ExploitedCosmos-based cross-chain bridge linking Ethereum and Cosmos was exploited via a suspected contract key compromise, stealing ~$5.4M in mixed assets; the bridge was halted by validators.
Summary
Cosmos-based cross-chain bridge linking Ethereum and Cosmos was exploited via a suspected contract key compromise, stealing ~$5.4M in mixed assets; the bridge was halted by validators.
How It Was Compromised — Bridge via Contract Key Compromise (Suspected)
On May 18, 2026 (reported July 10, 2026), the Cosmos-based Gravity Bridge cross-chain bridge linking Ethereum and Cosmos was exploited via a suspected compromise of a contract key. Stolen assets included approximately $4.3M USDC, 274 WETH (~$553K), approximately $434K USDT, and approximately $64K PAXG. Part of the stolen funds were laundered through ChangeNow and Binance. The attacker wallet held approximately 2,102 ETH (~$4.23M). The bridge was halted by validators following the attack.
Fund Flow & Laundering Analysis
Part of the stolen funds laundered through ChangeNow and Binance. Attacker wallet held ~2,102 ETH (~$4.23M). No recovery reported at time of writing.