Across Protocol Solana Bridge Exploit (July 2026)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4Q4awq…mw8KSummary
On July 17, 2026, an attacker exploited a flaw in Risk Labs' off-chain event-reading software for the Solana deployment of Across Protocol, a cross-chain bridge with over $34 billion in cumulative bridged volume. The attacker forged 1,627 deposit signals — exploiting Solana's lack of a canonical event system — tricking the Risk Labs-operated relayer into paying out approximately $3.35 million in net losses, while blocking an additional $37 million in fraudulent requests. No user funds were lost; all losses came from Risk Labs' own relayer capital, and Solana deposits were restored within roughly 12 hours via Circle's Cross-Chain Transfer Protocol (CCTP).
Connected Entities
2 entities- 8bkoZTaTBBtAPczgHqD4XVxWtvBkiy4crtexEtYDYSL→mentioned with→Across Protocol Solana Bridge Exploit (July 2026)(50%)
Timeline(10 events)
22 April 2026
Asymmetric Research publicly discloses a vulnerability in Across Protocol's Solana event handler. The disclosure details how failed transactions can emit events that a naive off-chain indexer cannot distinguish from successful ones, enabling deposit spoofing. Across patches the issue within hours; no funds are lost.
Asymmetric Research Blog12 March 2026
Across Protocol announces 'The Bridge Across' proposal to dissolve its DAO and form AcrossCo, a U.S. C-corporation. ACX token surges approximately 80% on the announcement.
CoinDesk26 March 2026
Across Protocol DAO votes on the transition to AcrossCo; the proposal passes with 91.51% of votes in favor.
Phemex News17 July 2026
At 05:07 UTC, an attacker begins submitting 1,627 forged deposit events from 1,627 single-use Solana wallets, requesting payouts across 18 destination chains with a combined face value of approximately $41.7 million.
crypto.news17 July 2026
At approximately 05:30 UTC, Across Protocol detects the attack. Risk Labs' relayer has by this point filled 581 of the fraudulent requests, advancing approximately $4.5 million. The team disables Solana as an origin chain, blocking the remaining 1,046 requests worth approximately $37 million.
Crypto Briefing17 July 2026
Across Protocol issues a public statement confirming the Solana bridge attack. 'Solana deposits have been disabled. The protocol is otherwise operating unaffected.' SEAL 911 is engaged to monitor flagged attacker addresses. All in-flight legitimate transfers are completed or fully refunded.
Web3 Is Going Great18 July 2026
Across Protocol restores Solana bridge deposits within approximately 12 hours of the attack, using Circle's Cross-Chain Transfer Protocol (CCTP) as an alternative routing mechanism. Full operations are confirmed.
KuCoin News22 July 2026
AFX Trade, an Arbitrum-based perpetuals DEX, is drained of $24.15 million after an attacker obtains private keys from five bridge validators, reaching withdrawal quorum. Security firm Blockaid flags the exploit at 21:30 UTC.
CoinDesk23 July 2026
The Verus-Ethereum bridge is exploited for $7.54 million in a second attack against the same protocol within two months, attributed to a different wallet than the May 2026 incident.
CryptoTimes26 July 2026
July 2026 bridge hack losses are reported at approximately $47 million in the prior week across AFX Trade, Wanchain, and Verus, with cumulative July losses approaching $97 million.
CryptoTimesDecision Log
- hash: QQCRMnKy93k5xENgAckwXty3SGrES4qYYD16KKQyDQR
- hash: EKhYKNKPAkojhvY4zGKg1UJ96kDSGrZkae2NVUWXEKkQ
- hash: 9i7GyriCxT67EuNHDTTNQaKchuduXNiViqsbq8NHi5aN
- hash: 5kFeDbijY79Ps6D7hCSiLNp2B1uioxUbuf9a3XX2wGcm
This investigation is cryptographically anchored to the Solana blockchain (4 events). 16 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/29/2026, 12:15:11 PM
last updated: 8/8/2026, 1:44:21 AM
6 viewsavoid.net — verified advice for a post-truth world