Odaily Planet Daily reports that Blockaid disclosed on X that the Alephium TokenBridge Ethereum cross-chain bridge was attacked. The attacker, by controlling three out of four Guardian keys, forged VAA (Verified Authorization Messages) and completed the attack in approximately seven minutes, stealing assets worth about $815,000.
During the attack, the attacker minted 13.76 million Wrapped ALPH out of thin air, exceeding 100% of the circulating supply prior to the attack, and unlocked and transferred assets such as USDT, USDC, WBTC, and WETH from the custodial pool. Currently, the attacker’s address still holds approximately $8.15 million in stolen assets and 13.76 million unbacked Wrapped ALPH, with the largest anomalous transaction being the minting of 13.76 million Wrapped ALPH out of thin air.