Gravity Bridge loses about US$5.4 million; restart and user recovery remain unconfirmed
Gravity Bridge lost about US$5.4 million and halted transfers between Ethereum and Cosmos. Later research disputes the initial stolen-key theory. Recovery and a safe restart remain unconfirmed; avoid new deposits and check any exposure with your custodian.
Avoid new Gravity Bridge deposits until the team confirms a safe restart. If you hold assets through it, ask your wallet provider or custodian to identify your exposure and verify any recovery instructions through established official channels.
What’s happening
Gravity Bridge, a service connecting Ethereum and Cosmos, lost approximately US$5.4 million in unauthorised withdrawals reported on 30 May. The stolen assets included USDC, wrapped ether, USDT and PAXG tokenised gold. The incident concerns people holding assets through the bridge. Gravity acknowledged the incident and halted operations. Initial reports suspected compromised signing keys, but QuillAudits’ 3 June analysis instead identified corrupted token-registration records that caused real assets to be released against worthless tokens. QuillAudits said part of the sequence still needed an official postmortem. Some funds passed through ChangeNow and Binance, according to PeckShield; subsequent research reported laundering through Tornado Cash. The latest dated operational report read, published by Rekt on 4 June, said the bridge remained offline without a restart timetable or compensation plan. Checks through 3 November found no later confirmation of a released fix, safe restart, recovered funds, user reimbursement or criminal charges.
- What
- Breach
- Affects
- Gravity Bridge Ethereum–Cosmos crypto bridge
- Fixed in
- Nothing to patch
- Since
- 30 May 2026
- Closed
- 4 June 2026
Timeline
- Update
Rekt reported that the bridge remained offline, with no restart timetable, compensation plan or official postmortem published. Its account also attributed the theft to corrupted token records rather than stolen signing keys.
- Update
QuillAudits attributed the theft to corrupted token-registration records rather than compromised keys. It said most funds remained in an attacker-controlled wallet, with laundering through Tornado Cash underway; part of the technical sequence still required an official postmortem.
- Update
Gravity Bridge acknowledged the incident, instructed validators and orchestrators to stop, and subsequently confirmed that the bridge was halted while it investigated. PeckShield reported that some stolen funds had passed through ChangeNow and Binance.
- Made publicNothing to patch
Researchers reported approximately US$5.4 million stolen from Gravity Bridge: US$4.3 million in USDC, 274 wrapped ether, US$434,000 in USDT and 14.16 PAXG gold tokens. Early assessments suspected compromised signing keys.
Sources
- Gravity Bridge incident halt statement (read as reproduced in reports; direct X access blocked)Gravity Bridge · 30 May 2026
- Cosmos-based Gravity Bridge drained of $5.4 million in suspected key compromise, researchers sayThe Block · 30 May 2026
- Gravity Bridge halted after $5.4M drain hits Ethereum-Cosmos linkcrypto.news · 30 May 2026
- Gravity Bridge $5.4M Denom Mapping Exploit (Explained)QuillAudits · 3 June 2026
- Gravity Bridge - RektRekt · 4 June 2026