A relayer logic flaw let an attacker drain nearly 200,000 XRP from the Coreum-XRPL bridge without stealing validator or multisig keys.