Ethereum

Gravity

PAX Gold

April

Gravity Bridge, a decentralized blockchain facilitating cross-chain transfers between Ethereum and Cosmos, was reportedly drained of roughly $5.4 million, prompting validators to halt the bridge.
Onchain analyst Specter first flagged the unusual outflows in a Saturday <a href="https://x.com/SpecterAnalyst/status/2060613063816941820?s=20" rel="noopener noreferrer nofollow">post</a> on X, revealing that the bridge contract key may have been compromised. “It appears the Gravity Bridge contract key may have been compromised, resulting in the theft of $5.4M,” Specter wrote.
Security firm PeckShield also <a href="https://x.com/PeckShieldAlert/status/2060636956984594521?s=20" rel="noopener noreferrer nofollow">confirmed</a> the exploit in a post, breaking down the stolen assets as approximately $4.3 million in USDC (USDC), 274 Wrapped Ether (WETH) worth roughly $553,000, $434,000 in USDt (USDT) and 14.164 PAX Gold (PAXG) tokens worth about $64,000.<img alt="Cosmos-based Gravity Bridge halts bridge after reported $5.4M exploit" height="1396" src="https://s3-images.ctmedia.io/media/content/pecks.png" width="1187">
Source: PeckShield
PeckShield reported that a portion of the haul had already been laundered through instant-swap service ChangeNow and through Binance, while the theft wallet was still holding around 2,102 ETH worth approximately $4.23 million at the time of its report.
Related: <a href="https://cointelegraph.com/news/stakedao-vsdcrv-attacker-liquidity-91k" rel="noopener noreferrer nofollow">StakeDAO exploit creates 5.4 trillion vsdCRV but nets only $91K</a>
<h2 id="gravity-bridge-acknowledges-attack">Gravity Bridge acknowledges attack</h2>
Gravity Bridge <a href="https://x.com/gravity_bridge/status/2060715098809970741" rel="noopener noreferrer nofollow">acknowledged</a> the incident on X without detailing what went wrong. “There was an unfortunate incident on Gravity,” the team wrote, adding that validators “should halt their validators and orchestrators while this incident is being investigated.” In a follow-up post, the team confirmed the bridge had been halted.
Gravity Bridge allows tokens to move freely in both directions, from Ethereum to Cosmos wallets and DEXs like Osmosis, and from Cosmos-based blockchains back to Ethereum platforms like Uniswap. Unlike bridges that rely on centralized multi-signatures or private node groups, it uses its full validator set to authorize transfers, making it one of the more decentralized bridge designs in the space, <a href="https://www.gravitybridge.net/faq" rel="noopener noreferrer nofollow">according</a> to its website.
Gravity Bridge’s native token is Graviton (GRAV), used by validators to secure the bridge. The token is currently trading at $0.0007053, down 4% over the past day, <a href="https://coinmarketcap.com/currencies/grav/" rel="noopener noreferrer nofollow">according</a> to data from CoinMarketCap.
Related: <a href="https://cointelegraph.com/news/all-defi-unsafe-ai-security-debate" rel="noopener noreferrer nofollow">‘All DeFi unsafe’ claim sparks AI security debate after April hack surge</a>
<h2 id="bridge-exploits-are-spooking-institutions">Bridge exploits are spooking institutions</h2>
As Cointelegraph reported, JPMorgan analysts have <a href="https://cointelegraph.com/features/defi-hacks-institutional-confidence-risks-outpace-yields" rel="noopener noreferrer nofollow">flagged bridge security</a> as a major challenge in an April research note, questioning whether DeFi can scale to meet institutional demand. The concern comes amid the recent Versus-Ethereum bridge attack, which was the eighth major bridge exploit of 2026, with cumulative losses across those incidents reaching $328.6 million.
Following the <a href="https://cointelegraph.com/news/layerzero-kelp-exploit-aave-loss" rel="noopener noreferrer nofollow">KelpDAO breach in April</a>, which drained roughly $290 million and was attributed to North Korea’s Lazarus Group, total value locked across DeFi fell from nearly $100 billion to around $86 billion in just two days, with outflows hitting pools that had no direct exposure to the compromised assets.
Asia Express: <a href="https://cointelegraph-magazine.com/north-korea-denies-crypto-hacks-upbits-bank-tests-ripple-asia-express/" rel="noopener noreferrer nofollow">North Korea denies crypto hacks, Upbit’s bank tests Ripple</a>

Cosmos-based Gravity Bridge halts bridge after reported $5.4M exploit

Table of Contents

Cointelegraph

Other articles published on May 31, 2026

Join our free newsletter for daily crypto updates!