Audit log

Every state-changing event for Across Protocol Solana Bridge Exploit (July 2026): moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-07-29 12:15:30Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   5kFeDbijY79P…3XX2wGcmcopysha256 → base58

   verifying row…

   canonical bytes (26130 B) ▸

   {"actor":"system:backfill","investigation_id":"12a321b4-9440-4a20-ba03-e25b6c779bc2","kind":"publish","page_slug":"across-protocol-solana-bridge-exploit-july-2026","published_at":"2026-07-29T12:15:30.728Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Across Protocol Solana Bridge Exploit (July 2026)","sections":[{"content":"At approximately 05:07 UTC on July 17, 2026, an attacker began submitting forged deposit events to the Solana deployment of the Across Protocol cross-chain bridge. The attack window lasted until approximately 06:14 UTC — a duration of roughly 67 minutes. During that window, the attacker used 1,627 single-use Solana wallets to create the same number of fabricated deposit events, representing a combined face value of approximately $41.7 million, with payouts requested across 18 destination chains. All funds were directed to a single EVM-compatible recipient address. Risk Labs' relayer filled 581 of those fraudulent requests — approximately 35.7% of the total volume of requests but only 10.8% of their stated face value — advancing roughly $4.5 million of its own capital before the team disabled Solana as an origin chain. Approximately $500,000 in attacker funds were trapped within the protocol, bringing the net loss to the relayer below $4 million. Across Protocol characterized the final confirmed net loss as approximately $3.35 million based on inflows to flagged EVM addresses. No user of the Across Protocol incurred any loss; every legitimate bridge transfer was either completed or fully refunded on July 17.","heading":"Incident Overview","severity":"high","sources":[{"credibility":2,"name":"Across Protocol confirms Solana bridge attack, says user funds are safe","type":"news_article","url":"https://cryptobriefing.com/across-protocol-solana-bridge-attack/"},{"credibility":2,"name":"Across Protocol exploited for $3.35 million","type":"news_article","url":"https://www.web3isgoinggreat.com/single/across-protocol-exploit"},{"credibility":2,"name":"Across Protocol relayer loses under $4M in Solana attack","type":"news_article","url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/"},{"credibility":2,"name":"Across Protocol Reports First Attack on Solana After $34B in Bridge Volume","type":"news_article","url":"https://www.cryptotimes.io/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"}]},{"content":"The exploit targeted a structural property of the Solana blockchain rather than a vulnerability in Across Protocol's smart contracts. Unlike EVM chains, Solana has no canonical event system; events are reconstructed from transaction traces by off-chain indexers. Critically, failed transactions on Solana can still emit inner instruction data, making it possible for a reverted transaction to appear — to a naive event reader — indistinguishable from a successful one. Risk Labs' off-chain relayer software failed to validate the overall success status of transactions when parsing reconstructed deposit events. An attacker could therefore: (1) initiate a deposit transaction that emits a FundsDeposited event, (2) cause the transaction to revert on a subsequent instruction, and (3) have the relayer observe the event and queue a payout — despite no real deposit having settled on-chain. This class of vulnerability was first publicly disclosed by security firm Asymmetric Research on April 22, 2026. That earlier disclosure described the precise multi-step attack path including the possibility of pairing the technique with a flash loan. Across patched the disclosed vulnerability at the time; the July 17 incident's full post-mortem, promised by the team for release in the days following the attack, was expected to clarify whether the exploit represented an incomplete fix of the April issue or a related but distinct vulnerability class in the same trust boundary between Solana's on-chain state and off-chain relayer software.","heading":"Attack Vector: Solana Event Spoofing","severity":"high","sources":[{"credibility":1,"name":"Asymmetric Research: Across Solana Event Spoofing Disclosure","type":"research","url":"https://blog.asymmetric.re/across-solana-event-spoofing/"},{"credibility":3,"name":"Across Protocol Got Hacked on Solana and No User Lost a Cent","type":"news_article","url":"https://startupfortune.com/across-protocol-got-hacked-on-solana-and-no-user-lost-a-cent/"},{"credibility":2,"name":"Across Protocol relayer loses under $4M in Solana attack","type":"news_article","url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/"}]},{"content":"Asymmetric Research published a formal disclosure on April 22, 2026 detailing how Across Protocol's Solana event handler failed to verify transaction status when parsing events reconstructed from transaction traces. The root cause, per the disclosure, was that the event indexer code iterated through inner instructions checking for the correct program address and PDA signer authority but never validated the transaction's overall success status. The firm described the attack path in detail: an attacker could take a flash loan, perform a deposit transaction emitting a FundsDeposited event, force transaction reversion on the next instruction, wait for relayers to queue transfers based on the fake event, and then receive funds on the destination chain without depositing any actual collateral. Across patched the issue within hours of the April 22 disclosure. At the time, no funds were lost; the Solana deployment was in a trial phase supporting only USDC with additional relayer-level safeguards limiting exploit viability. The July 17 exploit demonstrates that the underlying architectural risk — the reliance on off-chain event reconstruction without transaction-status gating — persisted in some form despite the April remediation. Across had participated in the Solana Foundation's STRIDE (Solana Trust, Resilience and Infrastructure for DeFi Enterprises) security program, which was launched in April 2026 in partnership with Asymmetric Research following the Drift Protocol exploit.","heading":"Prior Security Disclosure and Patch History","severity":"high","sources":[{"credibility":1,"name":"Asymmetric Research: Across Solana Event Spoofing","type":"research","url":"https://blog.asymmetric.re/across-solana-event-spoofing/"},{"credibility":2,"name":"Solana Foundation Launches STRIDE Security Program With Asymmetric Research","type":"news_article","url":"https://thecurrencyanalytics.com/finance/solana-foundation-launches-stride-security-program-with-asymmetric-research-partnership-251408"},{"credibility":1,"name":"Solana Foundation launches security overhaul days after $270 million Drift exploit","type":"news_article","url":"https://www.coindesk.com/tech/2026/04/07/solana-foundation-unveils-security-overhaul-days-after-usd270-million-drift-exploit"}]},{"content":"Three addresses were publicly flagged by Across Protocol and security researchers in connection with the attack. On Solana, investigators identified the address 8bkoZTaTBBtAPczgHqD4XVxWtvBkiy4crtexEtYDYSL. On EVM-compatible chains, two addresses were flagged: 0xa0C0e9f307b5A26cA3FB5891c19154fc7A02BeF7 and 0xA6fb971F3B7a9b9F76EdA76bc89268fe26560189. Analysis of the two EVM addresses found inflows totaling approximately $3.35 million on the morning of July 17. The majority of funds were subsequently consolidated to a separate address holding approximately 1,500 ETH (valued at approximately $2.85 million at the time). The attacker's wallets were alleged to have been funded via Tornado Cash on Ethereum and FixedFloat on Solana — platforms frequently associated with illicit fund sourcing in DeFi exploit investigations. Both services are commonly used to obscure the origin of pre-exploit funding and subsequently to launder proceeds. Across Protocol's SEAL 911 security group was engaged to monitor flagged addresses. As of reporting, no attribution to a known threat actor had been publicly made.","heading":"Attacker Fund Routing and On-Chain Forensics","severity":"high","sources":[{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"},{"credibility":2,"name":"Across Protocol Reports First Attack on Solana After $34B in Bridge Volume","type":"news_article","url":"https://www.cryptotimes.io/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"},{"credibility":2,"name":"Across Protocol confirms Solana bridge attack, says user funds are safe","type":"news_article","url":"https://cryptobriefing.com/across-protocol-solana-bridge-attack/"}]},{"content":"Across Protocol detected the attack at approximately 05:30 UTC on July 17, 2026, approximately 23 minutes after the first fraudulent deposits began. The team disabled Solana as an origin chain, immediately stopping all inbound Solana deposits. Across invalidated the remaining 1,046 unfilled fraudulent requests, preventing approximately $37 million in additional payouts. The protocol issued public statements confirming that Ethereum and Base bridges were unaffected and that all in-flight legitimate transfers were completed or fully refunded. Risk Labs engaged SEAL 911 — a DeFi security coalition — to monitor the flagged attacker addresses. The team committed to publishing a full technical post-mortem in the days following the incident. Solana deposits were restored within approximately 12 hours of the attack, using Circle's Cross-Chain Transfer Protocol (CCTP) as an alternative routing mechanism during the relaunch. The incident was described by the team as Across Protocol's first exploit in approximately five years of operation and over $34 billion in total bridged volume.","heading":"Protocol Response and Recovery","severity":"medium","sources":[{"credibility":3,"name":"Across Protocol Solana Attack, Restores Deposits Within Hours","type":"news_article","url":"https://www.coingabbar.com/en/crypto-currency-news/across-protocol-solana-attack-restored-within-hours-news"},{"credibility":2,"name":"Across Protocol exploited for $3.35 million","type":"news_article","url":"https://www.web3isgoinggreat.com/single/across-protocol-exploit"},{"credibility":2,"name":"Across Protocol relayer loses under $4M in Solana attack","type":"news_article","url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/"}]},{"content":"The July 2026 exploit occurred against the backdrop of a significant governance restructuring at Across Protocol. On March 12, 2026, the protocol announced a proposal — titled 'The Bridge Across' — to dissolve its tokenized DAO structure and transition to a U.S. C-corporation named AcrossCo. The ACX token surged approximately 80% on the announcement, reaching roughly $0.06 from a prior level near $0.033. The governance proposal passed with 91.51% of votes in favor. ACX token holders were offered two options: a 1:1 exchange of tokens for shares in AcrossCo (with equity access above 5 million ACX available directly and a no-fee SPV structure for holders of at least 250,000 ACX), or a USDC buyout at $0.04375 per token — a stated 25% premium to the 30-day average price prior to the announcement. The stated rationale was that the DAO structure had 'materially impacted' the protocol's ability to close institutional partnerships and integrations. The USDC buyout window was set to open within three months of governance approval and remain open for six months, funded by protocol liquid assets. As of the date of the July exploit, the transition to AcrossCo was underway. The implications of this structural change for decision-making authority, accountability, and the treatment of the relayer losses incurred by Risk Labs had not been publicly addressed in detail.","heading":"Governance Transition: DAO Dissolution and AcrossCo","severity":"medium","sources":[{"credibility":1,"name":"Across's ACX rockets 80% on plans to dump its DAO structure","type":"news_article","url":"https://www.coindesk.com/markets/2026/03/12/across-s-acx-rockets-80-massively-beating-bitcoin-on-plans-to-dump-its-dao-structure"},{"credibility":2,"name":"Across Protocol DAO Transitions to U.S. Corporation","type":"news_article","url":"https://phemex.com/news/article/across-protocol-dao-transitions-to-us-corporation-structure-71709"},{"credibility":2,"name":"Across proposes dissolving ACX token/DAO into US C-corp","type":"news_article","url":"https://whale-alert.io/stories/84960122f79510/Across-proposes-dissolving-ACX-tokenDAO-into-US-Ccorp-with-11-equity-conversion-or-USDC-buyout-ACX-jumps-80-on-heavy-volume"}]},{"content":"The Across Protocol exploit was one of multiple cross-chain bridge incidents in July 2026, which collectively pushed monthly bridge-related losses to approximately $97 million — exceeding the prior month's figure of $75.32 million. The week of July 17-24 alone saw approximately $47 million in losses across bridge protocols. AFX Trade, an Arbitrum-based perpetuals DEX, was drained of $24.15 million on July 22 after an attacker obtained private keys from five bridge validators, meeting the quorum required to authorize a fraudulent withdrawal. Security firm Blockaid detected the exploit at 21:30 UTC; the stolen USDC was converted into approximately 12,467.5 ETH. AFX Trade subsequently offered the attacker a 30% bounty to return the remainder. The Verus-Ethereum bridge was exploited for $7.54 million on July 23 in what was alleged to be a repeat attack using the same vulnerability path as a May 2026 incident that had drained approximately $11.58 million from the same contract. The July attack was attributed to a different wallet, suggesting a distinct actor using publicly known exploit code. Allbridge lost $1.65 million via a flash loan-powered price manipulation attack on a Solana liquidity pool, while TeleSwap incurred approximately $735,000 in losses in a separate incident identified by on-chain investigator ZachXBT. The year-to-date total for bridge hacks in 2026 was reported at over $355 million across approximately 20 documented incidents as of late July.","heading":"Broader Context: July 2026 Bridge Hack Wave","severity":"medium","sources":[{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"},{"credibility":2,"name":"AFX Bridge Exploit Drains $24 Million as July Crypto Hack Losses Near $100 Million","type":"news_article","url":"https://cryptorank.io/news/feed/e911c-afx-bridge-exploit-drains-24-million-as-july-crypto-hack-losses-near-100-million"},{"credibility":1,"name":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"credibility":2,"name":"Verus Ethereum Bridge Exploited Again for $7.54M in Repeat Attack","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"credibility":2,"name":"Allbridge Pauses Bridge After $1.65M Solana Exploit","type":"news_article","url":"https://www.gncrypto.news/news/allbridge-pauses-bridge-after-1-65m-solana-exploit/"},{"credibility":2,"name":"Crypto Loses Over $47M in a Week as AFX Trade, Wanchain, Verus Get Hacked","type":"news_article","url":"https://www.cryptotimes.io/2026/07/26/crypto-loses-over-47m-in-a-week-as-afx-trade-wanchain-verus-get-hacked/"}]},{"content":"Across Protocol uses an intent-based bridging architecture in which relayers — rather than the protocol itself — advance funds to users immediately from their own capital, with the expectation of reimbursement after on-chain settlement. This design has two notable consequences for security. First, it provides structural protection for users: because relayers bear the short-term execution risk, an exploit that tricks a relayer into advancing funds against fraudulent deposits exposes only the relayer's capital, not user deposits held in protocol contracts. This property was demonstrated in the July 17 incident, where all user funds remained safe. Second, it concentrates operational security risk at the relayer layer — specifically, in the off-chain software that relayers use to monitor source chains and determine when deposits have been made. For Solana, where the absence of a canonical event system requires events to be reconstructed from transaction traces, this trust boundary proved to be the attack surface. The July incident follows a prior April 2026 disclosure identifying the same boundary as vulnerable. The reliance on a single Risk Labs-operated relayer for the Solana deployment also represents a centralization point: if a more decentralized relayer set were operating on Solana, the attack's blast radius would potentially have been larger, as more independent relayers might have filled fraudulent requests before the exploit was detected.","heading":"Architectural Risk Assessment: Intent-Based Relayer Model","severity":"medium","sources":[{"credibility":3,"name":"Across Protocol Got Hacked on Solana and No User Lost a Cent","type":"news_article","url":"https://startupfortune.com/across-protocol-got-hacked-on-solana-and-no-user-lost-a-cent/"},{"credibility":1,"name":"Asymmetric Research: Across Solana Event Spoofing","type":"research","url":"https://blog.asymmetric.re/across-solana-event-spoofing/"},{"credibility":2,"name":"Cross-Chain Bridge Risk: Why Wrapped Assets Can Break","type":"news_article","url":"https://cryptodaily.co.uk/2026/07/cross-chain-bridge-risk-wrapped-assets"}]}],"sources_used":[{"credibility":2,"name":"Across Protocol confirms Solana bridge attack, says user funds are safe","type":"news_article","url":"https://cryptobriefing.com/across-protocol-solana-bridge-attack/"},{"credibility":2,"name":"Across Protocol exploited for $3.35 million","type":"news_article","url":"https://www.web3isgoinggreat.com/single/across-protocol-exploit"},{"credibility":2,"name":"Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week","type":"news_article","url":"https://protos.com/across-allbridge-teleswap-lost-5-7m-to-bridge-hacks-in-past-week/"},{"credibility":2,"name":"Across Protocol relayer loses under $4M in Solana attack","type":"news_article","url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/"},{"credibility":2,"name":"Across Protocol Reports First Attack on Solana After $34B in Bridge Volume","type":"news_article","url":"https://www.cryptotimes.io/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"},{"credibility":1,"name":"Asymmetric Research: Across Solana Event Spoofing","type":"research","url":"https://blog.asymmetric.re/across-solana-event-spoofing/"},{"credibility":1,"name":"Across's ACX rockets 80% on plans to dump its DAO structure","type":"news_article","url":"https://www.coindesk.com/markets/2026/03/12/across-s-acx-rockets-80-massively-beating-bitcoin-on-plans-to-dump-its-dao-structure"},{"credibility":2,"name":"Across Protocol DAO Transitions to U.S. Corporation","type":"news_article","url":"https://phemex.com/news/article/across-protocol-dao-transitions-to-us-corporation-structure-71709"},{"credibility":1,"name":"Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"credibility":2,"name":"Verus Ethereum Bridge Exploited Again for $7.54M in Repeat Attack","type":"news_article","url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"credibility":2,"name":"AFX Bridge Exploit Drains $24 Million as July Crypto Hack Losses Near $100 Million","type":"news_article","url":"https://cryptorank.io/news/feed/e911c-afx-bridge-exploit-drains-24-million-as-july-crypto-hack-losses-near-100-million"},{"credibility":3,"name":"Across Protocol Got Hacked on Solana and No User Lost a Cent","type":"news_article","url":"https://startupfortune.com/across-protocol-got-hacked-on-solana-and-no-user-lost-a-cent/"},{"credibility":1,"name":"Solana Foundation launches security overhaul days after $270 million Drift exploit","type":"news_article","url":"https://www.coindesk.com/tech/2026/07/17/across-protocol-reports-first-attack-on-solana-after-34b-in-bridge-volume/"},{"credibility":2,"name":"Crypto Loses Over $47M in a Week as AFX Trade, Wanchain, Verus Get Hacked","type":"news_article","url":"https://www.cryptotimes.io/2026/07/26/crypto-loses-over-47m-in-a-week-as-afx-trade-wanchain-verus-get-hacked/"},{"credibility":2,"name":"Allbridge Pauses Bridge After $1.65M Solana Exploit","type":"news_article","url":"https://www.gncrypto.news/news/allbridge-pauses-bridge-after-1-65m-solana-exploit/"},{"credibility":2,"name":"Cross-Chain Bridge Risk: Why Wrapped Assets Can Break","type":"news_article","url":"https://cryptodaily.co.uk/2026/07/cross-chain-bridge-risk-wrapped-assets"},{"credibility":2,"name":"Across proposes dissolving ACX token/DAO into US C-corp","type":"news_article","url":"https://whale-alert.io/stories/84960122f79510/Across-proposes-dissolving-ACX-tokenDAO-into-US-Ccorp-with-11-equity-conversion-or-USDC-buyout-ACX-jumps-80-on-heavy-volume"}],"summary":"On July 17, 2026, an attacker exploited a flaw in Risk Labs' off-chain event-reading software for the Solana deployment of Across Protocol, a cross-chain bridge with over $34 billion in cumulative bridged volume. The attacker forged 1,627 deposit signals — exploiting Solana's lack of a canonical event system — tricking the Risk Labs-operated relayer into paying out approximately $3.35 million in net losses, while blocking an additional $37 million in fraudulent requests. No user funds were lost; all losses came from Risk Labs' own relayer capital, and Solana deposits were restored within roughly 12 hours via Circle's Cross-Chain Transfer Protocol (CCTP).","timeline":[{"date":"2026-04-22","event":"Asymmetric Research publicly discloses a vulnerability in Across Protocol's Solana event handler. The disclosure details how failed transactions can emit events that a naive off-chain indexer cannot distinguish from successful ones, enabling deposit spoofing. Across patches the issue within hours; no funds are lost.","source":"Asymmetric Research Blog","source_url":"https://blog.asymmetric.re/across-solana-event-spoofing/"},{"date":"2026-03-12","event":"Across Protocol announces 'The Bridge Across' proposal to dissolve its DAO and form AcrossCo, a U.S. C-corporation. ACX token surges approximately 80% on the announcement.","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2026/03/12/across-s-acx-rockets-80-massively-beating-bitcoin-on-plans-to-dump-its-dao-structure"},{"date":"2026-03-26","event":"Across Protocol DAO votes on the transition to AcrossCo; the proposal passes with 91.51% of votes in favor.","source":"Phemex News","source_url":"https://phemex.com/news/article/across-protocol-dao-transitions-to-us-corporation-structure-71709"},{"date":"2026-07-17","event":"At 05:07 UTC, an attacker begins submitting 1,627 forged deposit events from 1,627 single-use Solana wallets, requesting payouts across 18 destination chains with a combined face value of approximately $41.7 million.","source":"crypto.news","source_url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/"},{"date":"2026-07-17","event":"At approximately 05:30 UTC, Across Protocol detects the attack. Risk Labs' relayer has by this point filled 581 of the fraudulent requests, advancing approximately $4.5 million. The team disables Solana as an origin chain, blocking the remaining 1,046 requests worth approximately $37 million.","source":"Crypto Briefing","source_url":"https://cryptobriefing.com/across-protocol-solana-bridge-attack/"},{"date":"2026-07-17","event":"Across Protocol issues a public statement confirming the Solana bridge attack. 'Solana deposits have been disabled. The protocol is otherwise operating unaffected.' SEAL 911 is engaged to monitor flagged attacker addresses. All in-flight legitimate transfers are completed or fully refunded.","source":"Web3 Is Going Great","source_url":"https://www.web3isgoinggreat.com/single/across-protocol-exploit"},{"date":"2026-07-18","event":"Across Protocol restores Solana bridge deposits within approximately 12 hours of the attack, using Circle's Cross-Chain Transfer Protocol (CCTP) as an alternative routing mechanism. Full operations are confirmed.","source":"KuCoin News","source_url":"https://www.kucoin.com/news/flash/across-reports-solana-attack-user-funds-unaffected"},{"date":"2026-07-22","event":"AFX Trade, an Arbitrum-based perpetuals DEX, is drained of $24.15 million after an attacker obtains private keys from five bridge validators, reaching withdrawal quorum. Security firm Blockaid flags the exploit at 21:30 UTC.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised"},{"date":"2026-07-23","event":"The Verus-Ethereum bridge is exploited for $7.54 million in a second attack against the same protocol within two months, attributed to a different wallet than the May 2026 incident.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/23/verus-ethereum-bridge-exploited-again-for-7-54m-in-repeat-attack/"},{"date":"2026-07-26","event":"July 2026 bridge hack losses are reported at approximately $47 million in the prior week across AFX Trade, Wanchain, and Verus, with cumulative July losses approaching $97 million.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2026/07/26/crypto-loses-over-47m-in-a-week-as-afx-trade-wanchain-verus-get-hacked/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 6b6af8dd-ccca-4dd2-a1ef-f25ef854dc5ecopy