Hackers used Gmail’s dot handling trick and a flaw in Robinhood’s account setup to send fake login alert emails that looked real. The emails came from Robinhood’s own system and tricked some users into clicking phishing links and entering sensitive details on fake websites.

On the morning of April 13th, Beijing time, on-chain monitoring platforms issued alerts one after another: Polkadot bridge assets on the Ethereum network were being issued abnormally.