Across Protocol has released a post-incident report on a Relayer security event tied to Solana operations. The report says an attacker exploited a vulnerability in Risk Labs’ offchain software for reading Solana events and forged 1,627 fake deposit events with a total face value of about $41.7 million. Before Solana services were paused, the Relayer advanced funds for 581 of those transactions, using roughly $4.5 million of its own capital. The remaining fake deposits, worth about $37 million, were rendered invalid.
Across Protocol said the incident did not involve a smart contract vulnerability. It added that all user transfers were either completed the same day or fully refunded. According to the report, losses were limited to Risk Labs’ own relayer capital, and after accounting for about $500,000 in attacker funds, net losses were below $4 million. The team also said Solana order flow has now been shifted to route entirely through CCTP, while the ACX token buyback plan remains unchanged.
Across Protocol has published a post-incident report on its Relayer security event, saying an attacker exploited a vulnerability in Risk Labs’ offchain software used to read Solana events and forged 1,627 fake deposit events with a total face value of about $41.7 million.
According to the report, the Relayer advanced funds for 581 of those transactions before Solana services were paused, putting about $4.5 million of its own capital at risk. The remaining fake deposits, worth about $37 million, have since become invalid.
Across Protocol said the incident did not stem from a smart contract flaw, and all user transfers were either completed the same day or fully refunded. The team added that losses were confined to Risk Labs’ relayer capital. After deducting about $500,000 in attacker funds, net losses were below $4 million.
The report also said Solana order flow has now been routed entirely through Circle’s Cross-Chain Transfer Protocol, or CCTP. Across Protocol added that its ACX token buyback plan has not been affected.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
