The Ankr cross-chain bridge attack involved three assets worth approximately $303,600.

Ankr's Ethereum cross-chain bridge was exploited on November 9 through five withdrawal transactions that moved five different tokens, three of which were valued at roughly $303,600 based on Etherscan prices, while the remaining two lacked price quotes and were excluded from the estimate. Each withdrawal referenced a small November 3 deposit on Optimism that had already been withdrawn on Ethereum, with the new calls using altered receipt data pointing to different recipient addresses and larger amounts. On-chain records show the withdrawals passed the bridge contract's authorization checks, though it remains unclear how the attacker obtained accepted approvals. The incident adds to a growing list of bridge exploits and puts focus on Ankr's authorization and receipt-validation logic, with the unvalued tokens and any reimbursement plans the next things to watch.