{"id":6253,"date":"2026-02-02T09:31:39","date_gmt":"2026-02-02T09:31:39","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=6253"},"modified":"2026-02-02T09:31:39","modified_gmt":"2026-02-02T09:31:39","slug":"crosscurve-bridge-drained-in-us3m-smart-contract-exploit-across-multiple-chains","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=6253","title":{"rendered":"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains"},"content":{"rendered":"<p><\/p>\n<div>\n<div id=\"blockquote-block_0bd8f239da1d4aeda58dd36ec2a28b30\" class=\"blockquote-container\" style=\"border-color: #5100fc\">\n<div class=\"blockquote-text\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CrossCurve confirmed an active bridge exploit enabling roughly US$3 million in unauthorised token unlocks.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A validation bypass allowed spoofed cross-chain messages to drain funds from the PortalV2 contract.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The incident drew comparisons to the Nomad hack and prompted warnings from Curve Finance.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>Cross-chain liquidity protocol CrossCurve has confirmed its bridge infrastructure is under active attack following the exploitation of a smart contract vulnerability that enabled unauthorised token unlocks worth approximately US$3 million (AU$4.32 million).CrossCurve disclosed the incident on Sunday, warning users to immediately halt all interactions with the platform while investigations continue.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">\u26a0\ufe0f URGENT Security Notice<\/p>\n<p>Dear users,<\/p>\n<p>Our bridge is currently under attack, involving the exploitation of a vulnerability in one of the smart contracts used.<\/p>\n<p>Please pause all interactions with CrossCurve while the investigation is ongoing.<\/p>\n<p>We appreciate your patience and\u2026 <a href=\"https:\/\/t.co\/yfo1KvWoDd\">pic.twitter.com\/yfo1KvWoDd<\/a><\/p>\n<p>\u2014 CrossCurve (@crosscurvefi) <a href=\"https:\/\/twitter.com\/crosscurvefi\/status\/2018063302199488687?ref_src=twsrc%5Etfw\">February 1, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Blockchain security firm-linked account Defimon Alerts attributed the exploit to a validation flaw within CrossCurve\u2019s ReceiverAxelar contract. The vulnerability allowed attackers to submit fabricated cross-chain messages via the expressExecute function, bypassing gateway checks designed to authenticate transactions. This bypass triggered unauthorised token releases from the protocol\u2019s PortalV2 contract without proper verification.<\/p>\n<p>On-chain data shared by Defimon Alerts shows the PortalV2 contract balance falling from roughly US$3 million (AU$4.32 million) to nearly zero on 31 January. The exploit appears to have affected multiple blockchain networks connected to CrossCurve\u2019s bridge infrastructure.<\/p>\n<p><strong>Related: Crypto Sell-Off Deepens as Bitcoin Briefly Dips Below $84K<\/strong><\/p>\n<h2 class=\"wp-block-heading\" id=\"h-concerns-over-longstanding-bridge-weaknesses\">Concerns Over Longstanding Bridge Weaknesses<\/h2>\n<p>The attack has drawn comparisons to the 2022 Nomad bridge incident, where flawed validation logic enabled widespread fund withdrawals. Security researcher Taylor Monahan noted that the same category of weakness continues to resurface in cross-chain systems.<\/p>\n<p>CrossCurve, formerly known as EYWA Protocol, operates a cross-chain decentralised exchange and consensus bridge developed in partnership with Curve Finance. The protocol routes transactions through several independent validation layers, including Axelar, LayerZero and the EYWA Oracle Network, in an effort to reduce single points of failure.<\/p>\n<p>Despite these safeguards, Curve Finance advised users with exposure to EYWA-related pools to reassess their positions and consider removing votes. The platform reiterated the importance of exercising caution when interacting with third-party protocols.<\/p>\n<p><strong>Related<\/strong>: SEC Chair Walks Back Timeline on Sweeping Crypto Exemptions After Wall Street Pushback<\/p>\n<\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>Blockchain,CrossCurve#CrossCurve #Bridge #Drained #US3M #Smart #Contract #Exploit #Multiple #Chains1770024699<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CrossCurve confirmed an active bridge exploit enabling roughly US$3 million in unauthorised token unlocks. A validation bypass allowed spoofed cross-chain messages to drain funds from the PortalV2 contract. The incident drew comparisons to the Nomad hack and prompted warnings from Curve Finance. Cross-chain liquidity protocol CrossCurve has confirmed its bridge infrastructure is under active attack<\/p>\n","protected":false},"author":1,"featured_media":6254,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[2089,2094,2092,2088,2090,664,2093,1722,2091],"class_list":{"0":"post-6253","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bitcoin","8":"tag-bridge","9":"tag-chains","10":"tag-contract","11":"tag-crosscurve","12":"tag-drained","13":"tag-exploit","14":"tag-multiple","15":"tag-smart","16":"tag-us3m"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=6253\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains\" \/>\n<meta property=\"og:description\" content=\"CrossCurve confirmed an active bridge exploit enabling roughly US$3 million in unauthorised token unlocks. A validation bypass allowed spoofed cross-chain messages to drain funds from the PortalV2 contract. The incident drew comparisons to the Nomad hack and prompted warnings from Curve Finance. Cross-chain liquidity protocol CrossCurve has confirmed its bridge infrastructure is under active attack\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=6253\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-02T09:31:39+00:00\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=6253\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=6253\",\"name\":\"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=6253#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=6253#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/02\/crypto-exploit.jpeg\",\"datePublished\":\"2026-02-02T09:31:39+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=6253#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=6253\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=6253#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/02\/crypto-exploit.jpeg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/02\/crypto-exploit.jpeg\",\"width\":1920,\"height\":1076},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=6253#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains - Crypto News: Latest Cryptocurrency News and Analysis","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=6253","og_locale":"en_US","og_type":"article","og_title":"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains","og_description":"CrossCurve confirmed an active bridge exploit enabling roughly US$3 million in unauthorised token unlocks. A validation bypass allowed spoofed cross-chain messages to drain funds from the PortalV2 contract. The incident drew comparisons to the Nomad hack and prompted warnings from Curve Finance. Cross-chain liquidity protocol CrossCurve has confirmed its bridge infrastructure is under active attack","og_url":"https:\/\/cryptonews.uk.com\/?p=6253","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-02-02T09:31:39+00:00","author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=6253","url":"https:\/\/cryptonews.uk.com\/?p=6253","name":"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=6253#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=6253#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/02\/crypto-exploit.jpeg","datePublished":"2026-02-02T09:31:39+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=6253#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=6253"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=6253#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/02\/crypto-exploit.jpeg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/02\/crypto-exploit.jpeg","width":1920,"height":1076},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=6253#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"CrossCurve Bridge Drained in US$3M Smart Contract Exploit Across Multiple Chains"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/6253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6253"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/6253\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/6254"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}