A bizarre exploit unfolded as an attacker minted nearly $1 billion worth of Polkadot tokens on Ethereum—only to walk away with just about $237,000.

The breach targeted a vulnerable cross-chain bridge, not the core Polkadot network itself. By forging a message, the attacker bypassed validation checks, seized admin control of the bridged token contract, and minted an enormous supply in a single move.

But what looked like a massive heist quickly unraveled. Liquidity in the DOT-ETH pool was too thin to absorb such a large dump, forcing the attacker to sell at fractions of a cent per token. In the end, the market itself capped the damage.

The incident underscores a recurring truth in crypto: bridges remain one of the weakest links. A single flaw can unlock unlimited minting power—but without deep liquidity, even a billion-dollar exploit can shrink into a surprisingly small payday.