What happened
An unknown user of the Taiwanese exchange BitoPro falsified a deposit in the XRP cryptocurrency and withdrew 7 million coins ($2.17 million) from the exchange. The mechanism of this exploit was described in detail by the Bitrue exchange:
The attacker claimed to have sent 330,000 XRP, but actually transferred only 0.003255 XRP marked as a partial payment "tfPartialPayment".
According to XRPScan, the attacker sent a lot of payments to the BitoPro wallet address, the value of which did not exceed 0.003255 XRP on average. Also, the registry displays two transactions of 3 million XRP, which were successfully credited to the account by the exchange:
Protocol details
Evidence
- report @BitrueOfficial incident report twitter.com
- report Report xrpchat.com
- report Report xrpcharts.ripple.com
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
