
Polkadot cut its token issuance by 53% in March 2026, is building toward its JAM supercomputer upgrade, and suffered a bridge exploit that exposed a specific vulnerability in its Ethereum gateway. Here's what UK DOT holders need to understand.
Important Risk Warning
This is not financial advice. Cryptocurrency investments are highly volatile. The value of your investment can go down as well as up, and you could lose all the money you invest. Don't invest unless you're prepared to lose all the money you put in.
London — On 14 March 2026 — Pi Day, chosen deliberately — Polkadot executed a governance-approved overhaul of its tokenomics that cut annual DOT issuance by 53.6% and introduced a hard supply cap of 2.1 billion tokens. Annual inflation fell from roughly 10% to just over 3%, immediately. A month later, an attacker exploited a vulnerability in Polkadot's Ethereum bridge to mint a billion bridged DOT tokens in a single transaction — but extracted only £190,000 or so worth of ETH before running out of liquidity.
Both events are worth understanding if you hold DOT or are considering it. They point to a network that's making serious structural changes, while navigating the security challenges that come with cross-chain infrastructure.
Polkadot's emissions cut was not automatic in the way Bitcoin's halvings are. It was passed through the network's on-chain governance system (OpenGov) as Referendum 1710, with 81% voting in favour. The change took effect on 14 March 2026.
Annual new DOT issuance dropped from approximately 120 million tokens to roughly 57 million — a 53.6% reduction. The new maximum supply cap of 2.1 billion DOT means the total supply is now bounded. Subsequent reductions of 13.14% of remaining issuance are scheduled every two years, following a formula based on the mathematical constant pi. The intent is to push annual inflation below 1% by the early 2030s.
Why does any of this matter for UK investors? Because a lower inflation rate means the dilution of existing DOT holdings is reduced. Under the old regime, staking was largely about keeping up with inflation rather than genuinely earning yield above the network's dilution rate. A 3% annual issuance means long-term holders are less penalised for simply holding, and the staking yield (still generally in the 14–18% range, distributed from the reduced issuance pool) represents a more genuine return relative to the total supply.
Polkadot's current architecture is built around a Relay Chain — a central hub that coordinates security for connected blockchains (parachains). JAM, the Join-Accumulate Machine, is designed to replace the Relay Chain entirely with a general-purpose decentralised computation layer.
The performance targets are ambitious: theoretical throughput of one million transactions per second, 850 megabytes per second of bandwidth, and two petabytes of data availability. Whether those figures translate to practical performance under real network conditions is a separate question, but the design represents a meaningful architectural departure from Polkadot's current model.
JAM mainnet is not expected before late 2026 or 2027. Testing phases are ongoing, and the developer tooling for building services on top of JAM still needs to mature. For UK developers who've been building on Polkadot's parachain model, the transition is designed to be gradual — existing parachains automatically become services on the new architecture without requiring code changes.
In parallel, the switch to Agile Coretime (introduced in late 2025) has already changed how projects access Polkadot's compute capacity. Instead of locking up DOT for years to secure a parachain slot, projects now purchase block time flexibly, which has meaningfully lowered the cost of entry and contributed to 150 new decentralised applications being added in Q1 2026 alone.
On 13 April 2026, an attacker exploited a vulnerability in the Hyperbridge Ethereum gateway contract — the bridge that allows DOT to be held on Ethereum. The flaw was in the Solidity code that verifies Merkle Mountain Range proofs: a bug in the proof verification logic allowed the attacker to treat invalid proofs as valid, giving them admin control over the bridged token contract. They minted one billion bridged DOT in a single transaction and routed them through Odos Router into a Uniswap V4 DOT-ETH liquidity pool.
The attacker extracted approximately 108 ETH, worth roughly $237,000 (about £190,000) at the time. One billion DOT tokens were minted, and the total haul was under a quarter of a million dollars. The shallow liquidity in the Ethereum DOT trading pool meant the price impact was immediate and severe — the attacker simply couldn't sell more without destroying the value of what they held.
The critical point, confirmed by Polkadot: the exploit did not affect the Polkadot core network or native DOT held on Polkadot. If your DOT was on the Polkadot chain itself — in a wallet, staked with a validator, or in a parachain — it was unaffected. Only DOT bridged through Hyperbridge to Ethereum was involved. Hyperbridge has been halted pending a post-mortem and remediation.
Polkadot is a technically ambitious project undergoing significant structural change in 2026. The tokenomics overhaul is the most meaningful supply-side change the network has made, and Agile Coretime has started to show results in developer adoption. The JAM upgrade represents the next architectural bet.
The Hyperbridge exploit is a reminder that cross-chain bridges — regardless of which network they serve — carry specific risks that are distinct from holding assets natively. If you're bridging DOT to Ethereum for DeFi use, you're taking on smart contract risk that doesn't apply to native DOT staking.
DOT is available on FCA-registered exchanges in the UK including Coinbase UK and Kraken. HMRC treats it identically to other cryptoassets for capital gains purposes.
Journalism
We use cookies to enhance your experience. By clicking "Accept", you agree to our use of cookies for analytics. See our Privacy Policy.