CrossCurve bridge exploited for approximately $3 million across multiple chains via spoofed messages
CrossCurve, a cross-chain liquidity protocol, has reported an active attack on its bridge infrastructure, resulting in an exploitation of approximately $3 million across multiple networks. The vulnerability, identified as a gateway validation bypass in the ReceiverAxelar contract, allowed unauthorized token unlocks. Users are advised to pause all interactions with CrossCurve during the ongoing investigation. This incident echoes the Nomad bridge exploit of 2022, raising concerns about security in cross-chain protocols. CrossCurve, previously EYWA Protocol, emphasizes its security architecture but faces scrutiny following this breach.
The Block·
