The Hyperbridge contract encountered an MMR proof replay vulnerability, resulting in a loss of approximately $242,000

According to market news, the HandlerV1 contract managed by Hyperbridge has a Merkle Mountain Range (MMR) proof replay vulnerability on the Ethereum network, resulting in a loss of approximately $242,000. The vulnerability arises from the proof not being bound to the request, allowing attackers to replay historically valid proofs in conjunction with new forged requests to perform operations such as changing administrator permissions.

In a specific case, the attacker changed the administrator of the Polkadot (DOT) Token and used the permissions to mint additional DOT for profit. Related attack transactions have been observed, including changing the administrator and minting of the DOT Token (loss of approximately $237,400), changing the administrator and minting of the ARGN Token (loss of approximately $3,800), and host withdrawals. The vulnerability was discovered by PhalconSecurity and analyzed through PhalconExplorer. Previously, it was reported that the Hyperbridge gateway contract was attacked, resulting in the minting and dumping of 1 billion DOT on Ethereum.