Tools Crypto Exploit Tracker exploit-0036
Exploit record
Gravity Bridge
- Loss
- $5M
- Attack vector
- Private Key Compromise
- Chain
- Ethereum
- Sector
- Bridge
What happened
The Ethereum–Cosmos Gravity Bridge was drained of about $5.4 million on 30 May 2026 in what researchers assessed as a compromised signing key rather than a code flaw.
With enough valid validator signing keys, forged withdrawals are treated as legitimate; the attacker took about $4.3 million in USDC, 274 WETH, $434,000 in USDT and 14.16 PAXG, laundering a portion through ChangeNow and Binance while retaining roughly 2,100 ETH. Researchers cited the incident as part of 2026's pattern of bridge losses driven by key compromises rather than smart contract bugs.
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026