HubSec

Independent security research for the Polkadot ecosystem. Post-mortems, vulnerability analysis, and on-chain forensics.

April 13, 2026criticalLatest

Hyperbridge ISMP Gateway Exploit

An attacker exploited four compounding vulnerabilities in the Hyperbridge ISMP gateway to mint 1B bridged DOT and extract approximately $250,000-$787,000 across two transactions. Novel MMR proof boundary bypass, missing cryptographic binding, shallow governance auth, and dangerous ERC-6160 privilege model.

Read the full analysis →

Research

We publish post-mortem analysis and vulnerability research. Every report includes technical root cause, fund flow tracing, and actionable detection rules.

Sentinel

In Dev

Automated vulnerability scanning for ink!, Solidity, FRAME pallets, and deployed WASM bytecode.

Learn more →

Forensics

In Dev

On-chain investigation tools. Transaction tracing, wallet profiling, and cross-chain fund flow analysis.

Learn more →