DO Chain has temporarily suspended its bridge from the Terra Luna Classic (LUNC) network following a security breach involving the Garuda platform that reportedly resulted in the theft of approximately 42 trillion DO tokens. The incident triggered substantial selling pressure across DO markets and contributed to a sharp decline in the token’s price.
In an official announcement, the DO Chain team said the stolen tokens were taken through Garuda’s staking feature. The attacker reportedly sold part of the assets into LUNC liquidity pools before bridging the remaining tokens from the LUNC chain to DO Chain, where they were subsequently sold on the network’s markets.
The team said it suspended the bridge as a precautionary measure to prevent further movement of potentially compromised tokens. The decision is intended to limit additional selling pressure while the project assesses the situation and determines its next steps.
The incident highlights how vulnerabilities in third-party platforms can affect connected blockchain ecosystems, even when the underlying network has not itself been compromised.
Garuda Exploit Sends Selling Pressure Into DO Chain
According to DO Chain’s announcement, approximately 42 trillion DO tokens were stolen through Garuda’s staking functionality. The attacker then used multiple routes to sell the assets, creating pressure across both LUNC and DO Chain markets.
The reported sequence involved two main stages. A portion of the stolen tokens was sold through LUNC liquidity pools, while the remaining amount was transferred through the bridge to DO Chain before being sold on its markets.
This movement is significant because blockchain bridges connect separate networks and allow assets to move between ecosystems. When compromised tokens are transferred across a bridge, the consequences of an exploit on one platform can extend into markets on another chain.
Related: LUNC Ecosystem Targets Deeper Liquidity With Wrapped Bitcoin, Ethereum and Tokenized Gold
DO Chain’s team said the resulting sales contributed to a sharp fall in the DO token price. However, the announcement did not provide a detailed breakdown of how many tokens were sold on each network, the total value realized by the attacker or the amount of compromised tokens that may remain in circulation.
The reported figure of 42 trillion tokens also needs to be considered in the context of DO’s total supply, circulating supply and liquidity. Without those details, it is difficult to establish the full financial impact of the incident.
DO Chain Suspends Bridge as Team Investigates
The temporary suspension specifically affects the bridge transferring DO tokens from the LUNC chain to DO Chain. The measure is designed to prevent additional potentially compromised assets from entering the DO Chain ecosystem while the team monitors the situation.
DO Chain emphasized that the security breach did not originate within its own infrastructure. According to the announcement, the attack occurred on Garuda, a third-party platform operating on a different blockchain.
That distinction separates the original vulnerability from the subsequent market impact. Although DO Chain says its own network was not the source of the breach, the movement and sale of stolen DO tokens directly affected its ecosystem.
Related: How the Binance Hack Happened: What the $6.3 Billion Crypto Heist Reveals About Exchange Security
The bridge suspension may reduce the risk of further transfers through that route, but it does not automatically reverse transactions that have already taken place or recover tokens sold by the attacker. The team has not announced a confirmed recovery of the stolen assets.
DO Chain said it is closely monitoring developments and will provide additional information about the bridge and any further measures. The duration of the suspension and the conditions required for reopening have not yet been disclosed.
For DO holders, the immediate issues are whether additional compromised tokens can reach the network, how the team will address the market disruption and when normal bridge operations can resume. The incident also raises broader questions about the security of staking platforms and cross-chain infrastructure, particularly when assets can move between networks after a third-party breach.














