CrossCurve Bridge Loses $3M in Smart Contract Exploit Across Multiple Chains
CrossCurve, a cross-chain bridge protocol, suffered a $3 million exploit after an attacker exploited a vulnerability in its smart contract system. The breach targeted the ReceiverAxelar contract, which handles cross-chain messaging, allowing unauthorized token releases. Platform activity was halted to prevent further losses.
Security analysts identified forged cross-chain messages bypassing gateway verification as the attack vector. The exploit impacted multiple chains, draining liquidity pools before the team intervened. CrossCurve is now investigating the breach while working to stabilize operations.
This incident highlights persistent risks in cross-chain infrastructure, particularly around validation checks for cross-chain messages. The project has not yet disclosed a timeline for resuming operations or recovery plans for affected users.
