ChainCatcher report: Across Protocol has released a post-incident report on the Relayer security event. The attacker exploited a vulnerability in Risk Labs’ off-chain event reader software on Solana to fabricate 1,627 fraudulent deposit transactions with a total face value of approximately $41.7 million. The report states that before pausing Solana services, the Relayer had advanced payments for 581 of these transactions, involving approximately $4.5 million of its own capital, while the remaining $37 million in fraudulent deposits were rendered invalid. This incident did not involve any smart contract vulnerabilities, and all user transfers were either completed or fully refunded on the same day. Across Protocol stated that losses were limited to Risk Labs’ own relayer capital, with a net loss of less than $4 million after deducting approximately $500,000 in attacker funds. Solana order flow has now been fully routed through CCTP, and the ACX token buyback program remains unaffected.
Across Protocol relayer attack results in under $4 million net loss
ChaincatcherShare
Summary
Across Protocol shared an incident report regarding the Relayer vulnerability, confirming that a protocol update was implemented after attackers exploited a flaw in Risk Labs’ Solana off-chain event reader. On-chain data shows that 1,627 fraudulent deposit events were forged, totaling approximately $41.7 million. The Relayer compensated for 581 of these, using $4.5 million of its own capital before services were paused. The remaining $37 million was invalidated. No smart contracts were compromised, and all user transfers were either settled or refunded. Across stated that the net loss is below $4 million after deducting approximately $500,000 from the attacker’s funds. Solana traffic is now rerouted through CCTP, and the ACX buyback program remains unchanged.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.