How a Missing Bounds Check Led to $237K Exploit on Hyperbridge

On April 13, 2026, an attacker minted 1 billion bridged DOT tokens out of thin air on Ethereum - and dumped them for roughly $237,000 in ETH. The target was Hyperbridge, Polytope Labs’ trust-minimized interoperability protocol connecting Polkadot to EVM chains.