Back Kucoin

Across Protocol Reports Security Incident with Net Loss Under $4M

Kucoin • July 25, 2026

PANews, July 25: The cross-chain protocol Across Protocol has released a post-incident report regarding the Relayer security event. On July 17, attackers exploited a vulnerability in Risk Labs’ off-chain event reader software for Solana to fabricate 1,627 fraudulent deposit transactions with a total face value of approximately $41.7 million. Before suspending Solana services, the Relayer advanced funds for 581 of these transactions, using approximately $4.5 million of its own capital; approximately $500,000 of the attacker’s funds remain trapped within the protocol, resulting in a net loss of less than $4 million. The remaining approximately $37 million in fraudulent deposits have been invalidated.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Across Protocol Exploit Results in $4.5M Loss, User Funds Safe On July 17, 2026, Across Protocol experienced an exploit that led to a loss of approximately $4.5 million due to a bug in the relay software interpreting off-chain events on the Solana network. The attacker fabricated 1,627 fraudulent deposit transactions, tricking the relayer into advancing funds for 581 of these transactions. Despite the significant face value of the fraudulent deposits, user funds remained unaffected, and the core smart contracts were not compromised. The Across team quickly patched the vulnerability within five hours of discovery and confirmed that their scheduled ACX buyback plan would proceed as planned. The incident highlights the importance of auditing all layers of cross-chain bridge infrastructure, especially off-chain components. The remaining fraudulent deposits have been invalidated, and approximately $500,000 of the attacker’s funds are still trapped within the protocol. 3 sources 51

Across Protocol Reports Security Incident with Net Loss Under $4M

The full story

Extracted Entities

Companies (2)

Platforms (1)