{"investigation":{"slug":"crosscurve","entity_name":"CrossCurve","trust_score":67,"severity_base":67,"score_modifier":0,"confidence":0.78,"status":"published","content_type":"investigation","summary":"CrossCurve (formerly EYWA) is a cross-chain DeFi liquidity protocol built with Curve Finance and backed by about $8.5 million in funding, including a seed round led by Curve founder Michael Egorov. On 1-2 February 2026 an access-control flaw in its ReceiverAxelar contract let an attacker forge cross-chain messages and drain PortalV2 contracts on multiple chains; reported losses range from about $3 million to $1.44 million in confirmed liquid losses after XT Exchange froze minted EYWA tokens. The team offered a 10% SafeHarbor bounty and threatened legal action, but no fund recovery had been publicly confirmed as of May 2026.","sections":[{"content":"CrossCurve is a cross-chain trading and yield protocol developed by EYWA, a blockchain infrastructure company founded in 2021 by Boris Povar, Faraj Abutalibov and Peter Tagunov and registered in Tortola, British Virgin Islands. CrossCurve is the rebranded product of EYWA Protocol, a cross-chain liquidity and consensus bridge project, and was developed as a joint product between EYWA and Curve Finance. It describes itself as a 'DeFi MetaLayer' built on top of Curve Finance's automated market maker (AMM) infrastructure, aggregating Curve liquidity pools into a unified cross-chain market and enabling low-slippage cross-chain swaps of stablecoins and other assets by routing through Curve's liquidity pools. In its first year of operation the protocol reported over $21 million in TVL and approximately $1.85 billion in trading volume. Its consensus bridge architecture was intended to reduce single points of failure by routing transactions through multiple independent validation protocols: Axelar, LayerZero and the EYWA Oracle Network. CEO Boris Povar has a background in mathematics and software engineering, with prior experience running an IT outsourcing firm and involvement in crypto markets since 2017. Sources differ on the protocol's chain coverage: the project's own materials describe more than 20 supported blockchains, while coverage of the exploit lists Ethereum, BNB Chain, Polygon, Avalanche, Arbitrum and Optimism as supported at the time of the attack.","heading":"Overview and background","sources":[{"url":"https://crosscurve.fi/","name":"crosscurve.fi","type":"official","credibility":3},{"url":"https://docs.eywa.fi/eywa-ecosystem/team","name":"docs.eywa.fi","type":"official","credibility":3},{"url":"https://tracxn.com/d/companies/crosscurve/__nGqUTPDbr5mzlOWCUZlCLLaznFYA806Qh481XLIQOY8","name":"tracxn.com","type":"other","credibility":3},{"url":"https://crosscurve.medium.com/an-interview-with-eywa-ceo-boris-povar-92e21ae9ed07","name":"crosscurve.medium.com","type":"official","credibility":3},{"url":"https://www.cryptopolitan.com/eywa-defi-innovation-backed-by-industry-titans/","name":"EYWA: DeFi innovation backed by industry titans — Cryptopolitan","type":"news_article","credibility":2},{"url":"https://www.crunchbase.com/funding_round/eywa-e9b6-seed--adf2938f","name":"Seed Round — CrossCurve Metelayer — Crunchbase","type":"other","credibility":2}],"severity":"low"},{"content":"In May 2024 EYWA completed a $7 million seed round led by Curve Finance founder Michael Egorov, with participation from Fenbushi Capital, GBV Capital, Big Brain Holdings, Marshland Capital and Mulana Capital. Egorov had reportedly invested in EYWA earlier, in September 2023, establishing the Curve partnership. A further, smaller round followed in late 2024 with participation from 1inch co-founder Anton Bukov and Kenetic Fund. Total reported funding across private and public rounds reached approximately $8.5 million. Egorov's role as lead investor is notable given his simultaneous role as founder of Curve Finance, the liquidity infrastructure on which CrossCurve is built; Egorov was himself the subject of controversy in 2023, when large collateralized loans against his CRV holdings triggered liquidations across multiple DeFi platforms.","heading":"Funding and investors","sources":[{"url":"https://www.globenewswire.com/news-release/2024/05/03/2875386/0/en/Top-VCs-Join-EYWA-s-Seed-Round-Led-by-Curve-Founder.html","name":"globenewswire.com","type":"official","credibility":3},{"url":"https://finance.yahoo.com/news/top-vcs-join-eywas-seed-213000700.html","name":"Top VCs Join EYWA's Seed Round Led by Curve's Founder — Yahoo Finance","type":"news_article","credibility":2},{"url":"https://cryptorank.io/ico/eywa","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://www.cryptopolitan.com/eywa-defi-innovation-backed-by-industry-titans/","name":"EYWA: DeFi innovation backed by industry titans — Cryptopolitan","type":"news_article","credibility":2},{"url":"https://www.crunchbase.com/funding_round/eywa-e9b6-seed--adf2938f","name":"Seed Round — CrossCurve Metelayer — Crunchbase","type":"other","credibility":2}],"severity":"low"},{"content":"On 1-2 February 2026 CrossCurve's bridge infrastructure was exploited, draining PortalV2 contracts across multiple blockchain networks, and on 2 February the team publicly confirmed the bridge was under active attack. On-chain data reportedly tracked by Arkham Intelligence showed the PortalV2 contract balance dropping from approximately $3 million to near zero around 31 January 2026, about one day before the public announcement. The exploit was executed across multiple chains including Ethereum, Arbitrum, Optimism, Base, Mantle, Kava, Frax, Celo and Blast. The attacker subsequently swapped, bridged and laundered the stolen tokens in an attempt to obscure their trail. Reports differ on the size of the loss: initial reports from security monitors and news outlets cited approximately $3 million, while QuillAudits' post-mortem confirmed $1,441,892.31 in assets successfully removed and remaining under the attacker's control. QuillAudits attributes the gap to a large quantity of minted EYWA tokens (approximately 999.8 million) being frozen by XT Exchange, which prevented their liquidation.","heading":"February 2026 bridge exploit","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","name":"Explained: The CrossCurve Hack (February 2026) — Halborn","type":"research","credibility":2},{"url":"https://www.theblock.co/post/387939/crosscurve-bridge-exploited-for-approximately-3-million-across-multiple-chains-via-spoofed-messages","name":"CrossCurve bridge exploited for approximately $3 million across multiple chains via spoofed messages — The Block","type":"news_article","credibility":2},{"url":"https://beincrypto.com/crosscurve-bridge-exploit-loss/","name":"$3 Million Reportedly Lost in CrossCurve Bridge Exploit — BeInCrypto","type":"news_article","credibility":2},{"url":"https://www.banklesstimes.com/articles/2026/02/02/crosscurve-bridge-suffers-3m-exploit-across-multiple-chains/","name":"CrossCurve Bridge Suffers $3M Exploit Across Multiple Chains — BanklessTimes","type":"news_article","credibility":2},{"url":"https://crypto.news/crosscurve-exploited-for-3-million-in-multi-network-bridge-attack/","name":"CrossCurve exploited for $3 million in multi-network bridge attack — Crypto.news","type":"news_article","credibility":2},{"url":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit","name":"quillaudits.com","type":"research","credibility":3},{"url":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","name":"decrypt.co","type":"news_article","credibility":3},{"url":"https://thecyberexpress.com/crosscurve-bridge-3m-cyberattack/","name":"$3M CrossCurve Bridge Cyberattack Exposes Validation Flaw — The Cyber Express","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/02/02/crosscurve-suffers-3m-loss-in-cross-chain-bridge-breach/","name":"cryptotimes.io","type":"news_article","credibility":3},{"url":"https://www.kucoin.com/news/articles/crosscurve-bridge-exploit-3m-loss-due-to-fabricated-message-vulnerability","name":"CrossCurve Bridge Exploit: $3M Loss Due to Fabricated Message Vulnerability — KuCoin News","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Security firm Halborn attributed the exploit to weak access controls in the ReceiverAxelar contract's expressExecute-like functions. These functions were intended to accept messages only from the Axelar gateway but did not validate the origin of the message. Any caller could invoke expressExecute() with a spoofed cross-chain message, and the contract treated the fabricated payload as a legitimate instruction from Axelar, causing the PortalV2 contract to release tokens to an attacker-chosen address without any corresponding deposit on a source chain. The confirmation threshold was also reportedly misconfigured at 1, effectively disabling multi-guardian validation. BlockSec characterized the root cause as over-reliance on a single validation pathway, noting that cross-chain systems depending on one validation path create exploitable single points of failure. Although CrossCurve's architecture incorporated Axelar, LayerZero and the EYWA Oracle Network as validation layers, the access-control gap in a single contract was sufficient to circumvent the intended multi-pathway design.","heading":"Technical root cause: ReceiverAxelar access control","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","name":"Explained: The CrossCurve Hack (February 2026) — Halborn","type":"research","credibility":2},{"url":"https://dev.to/ohmygod/the-crosscurve-3m-bridge-exploit-how-one-missing-check-let-attackers-forge-cross-chain-messages-516m","name":"The CrossCurve $3M Bridge Exploit: How One Missing Check Let Attackers Forge Cross-Chain Messages — DEV Community","type":"research","credibility":3},{"url":"https://www.banklesstimes.com/articles/2026/02/02/crosscurve-bridge-suffers-3m-exploit-across-multiple-chains/","name":"CrossCurve Bridge Suffers $3M Exploit Across Multiple Chains — BanklessTimes","type":"news_article","credibility":2},{"url":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit","name":"quillaudits.com","type":"research","credibility":3}],"severity":"critical"},{"content":"CEO Boris Povar suspended platform operations, paused all contracts and warned users to stop interacting with the protocol. The team identified ten Ethereum addresses that received the stolen funds and issued a 72-hour deadline, measured from block 24364392, for the funds to be returned or contact to be made. The statement read: 'We do not believe this was intentional on your part, and there is no indication of malicious intent.' CrossCurve invoked its SafeHarbor WhiteHat policy, offering up to 10% of recovered funds (approximately $300,000) as a bounty for returning the remaining 90%, said anonymous parties could return assets to a designated wallet, and sent on-chain messages to the attacker's addresses. If the deadline passed without contact, the team said it would pursue criminal referrals, civil litigation, coordination with centralized exchanges and stablecoin issuers to freeze assets, public disclosure of wallet data, and collaboration with blockchain analytics firms including Chainalysis and with law enforcement. XT Exchange froze EYWA token deposits, preventing the attacker from liquidating approximately 999.8 million minted EYWA tokens. No public confirmation of fund recovery or of legal proceedings had been reported as of May 2026.","heading":"Team response, bounty offer and legal threats","sources":[{"url":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","name":"decrypt.co","type":"news_article","credibility":3},{"url":"https://www.thecoinrepublic.com/2026/02/02/crypto-hack-crosscurve-warns-users-to-halt-activity-as-bridge-comes-under-attack/","name":"thecoinrepublic.com","type":"news_article","credibility":3},{"url":"https://www.web3isgoinggreat.com/single/crosscurve-users-exploited-for-around-3-million","name":"web3isgoinggreat.com","type":"community_report","credibility":3},{"url":"https://finance.yahoo.com/news/crosscurve-threatens-legal-action-3m-054416969.html","name":"finance.yahoo.com","type":"news_article","credibility":3},{"url":"https://beincrypto.com/crosscurve-bridge-exploit-loss/","name":"$3 Million Reportedly Lost in CrossCurve Bridge Exploit — BeInCrypto","type":"news_article","credibility":2},{"url":"https://coinedition.com/crosscurve-bridge-exploited-for-3m-after-spoofed-cross-chain-messages/","name":"CrossCurve Bridge Exploited for $3M After Spoofed Cross-Chain Messages — CoinEdition","type":"news_article","credibility":2},{"url":"https://crypto.news/crosscurve-exploited-for-3-million-in-multi-network-bridge-attack/","name":"CrossCurve exploited for $3 million in multi-network bridge attack — Crypto.news","type":"news_article","credibility":2}],"severity":"high"},{"content":"In March 2026 CrossCurve commissioned Web3 security firm Hashlock to audit its LayerZero-based OFT (Omnichain Fungible Token) messaging contracts: CrossCurveCore.sol, OFTAdapter.sol, MintBurnOFTAdapter.sol, CrossCurveOFTStorage.sol and OptionsReader.sol. The review identified one medium-severity vulnerability, three low-severity findings and one QA observation; Hashlock reported all issues resolved and gave the contracts a 'Secure' rating, noting appropriate use of OpenZeppelin libraries. The audit covered contracts separate from the exploited ReceiverAxelar contract, so it broadened security coverage rather than directly re-auditing the attacked component.","heading":"Post-exploit security audit","sources":[{"url":"https://www.mexc.com/news/1028361","name":"mexc.com","type":"news_article","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","name":"Explained: The CrossCurve Hack (February 2026) — Halborn","type":"research","credibility":2}],"severity":"medium"},{"content":"CrossCurve's native EYWA token reached an all-time high of approximately $0.252 on 27 December 2024. As of May 2026 it traded at approximately $0.001-0.002, a decline of roughly 99% from that high. TVL reported by DefiLlama stood at approximately $20.27 million, roughly consistent with pre-exploit levels, and the protocol appeared to remain operational. No regulatory actions by the SEC, CFTC or other authorities had been publicly reported against CrossCurve or EYWA as of May 2026.","heading":"Token and protocol status","sources":[{"url":"https://www.coingecko.com/en/coins/eywa","name":"coingecko.com","type":"other","credibility":3},{"url":"https://defillama-ui.vercel.app/protocol/crosscurve-(by-eywa)?denomination=USD","name":"defillama-ui.vercel.app","type":"other","credibility":3},{"url":"https://cryptorank.io/price/eywa","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://chainbroker.io/projects/crosscurve/","name":"chainbroker.io","type":"other","credibility":3}],"severity":"medium"},{"content":"ZachXBT, the pseudonymous on-chain investigator who joined Paradigm as an incident response advisor in February 2025, is reported to have flagged CrossCurve. The nature, date and content of any such flag could not be confirmed through verifiable public sources, and no published ZachXBT thread specifically addressing CrossCurve was found.","heading":"Unverified ZachXBT flag","sources":[{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","credibility":3},{"url":"https://thedefiant.io/news/markets/crypto-traders-attempt-to-frontrun-zachxbt-s-upcoming-expose","name":"thedefiant.io","type":"news_article","credibility":3}],"severity":"low"},{"content":"The CrossCurve exploit is part of a broader pattern of cross-chain bridge attacks; bridges are considered among the most dangerous attack surfaces in DeFi because of the difficulty of validating message authenticity across heterogeneous blockchains. The ReceiverAxelar vulnerability class, in which cross-chain message authenticity is not properly verified, is a well-documented attack vector, and the incident bears technical similarities to earlier bridge exploits such as Ronin ($625M, 2022) and Nomad ($190M, 2022). Estimates of the wider bridge losses differ by source and period: one industry analysis put bridge exploit losses at over $140 million across 2025-2026, while PeckShield tracked 8 major bridge exploits totaling approximately $328.6 million through mid-May 2026, listing CrossCurve alongside THORchain, ZetaChain, KelpDAO, HyperBridge, Squid Router and IoTeX. That year-to-date figure includes a reported $300 million KelpDAO LayerZero breach and a reported $200 million Drift Protocol incident in April 2026. KuCoin research described bridge exploits and sophisticated operations as driving over $750 million in total crypto losses through mid-2026.","heading":"Cross-chain bridge risk context","sources":[{"url":"https://dev.to/ohmygod/cross-chain-bridge-security-checklist-7-lessons-from-140m-in-bridge-exploits-2025-2026-5ap3","name":"dev.to","type":"research","credibility":3},{"url":"https://www.ccn.com/news/crypto/crosscurve-bridge-exploit-3m-cross-chain-risk-hack/","name":"CrossCurve Bridge Exploit Drains About $3M, Rekindling Cross-Chain Risk — CCN","type":"news_article","credibility":2},{"url":"https://news.bitcoin.com/crypto-bridge-exploits-328-million-may-2026-peckshield/","name":"Crypto Bridge Exploits Hit $328.6M in May as Peckshield Tracks 8 Major Incidents — Bitcoin.com News","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/blog/top-crypto-hacks-2026-bridge-exploits","name":"Top Crypto Hacks of 2026: Bridge Exploits and Sophisticated Operations Drive Over $750 Million in Losses — KuCoin","type":"news_article","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2021","event":"EYWA founded by Boris Povar, Faraj Abutalibov and Peter Tagunov; registered in Tortola, British Virgin Islands.","source":"docs.eywa.fi","source_url":"https://docs.eywa.fi/eywa-ecosystem/team"},{"date":"2023-09","event":"Curve Finance founder Michael Egorov reportedly invests in EYWA Protocol (CrossCurve's predecessor), establishing the Curve partnership.","source":"Cryptopolitan","source_url":"https://www.cryptopolitan.com/eywa-defi-innovation-backed-by-industry-titans/"},{"date":"2024-05","event":"EYWA completes a $7 million seed round led by Michael Egorov, with participation from Fenbushi Capital, GBV Capital, Big Brain Holdings, Marshland Capital and Mulana Capital.","source":"Yahoo Finance / The Defiant","source_url":"https://finance.yahoo.com/news/top-vcs-join-eywas-seed-213000700.html"},{"date":"2024-12","event":"EYWA announces an additional funding round with 1inch co-founder Anton Bukov and Kenetic Fund, bringing total raised to approximately $8.5 million.","source":"cryptorank.io","source_url":"https://cryptorank.io/ico/eywa"},{"date":"2024-12","event":"EYWA token reaches its all-time high of approximately $0.252.","source":"coingecko.com","source_url":"https://www.coingecko.com/en/coins/eywa"},{"date":"2026-01","event":"PortalV2 contract balance reportedly drops from approximately $3 million to near zero (Arkham Intelligence data), about one day before the public announcement.","source":"Crypto.news (citing Arkham Intelligence)","source_url":"https://crypto.news/crosscurve-exploited-for-3-million-in-multi-network-bridge-attack/"},{"date":"2026-02","event":"CrossCurve confirms its bridge is under active attack across multiple networks; approximately $3 million drained from PortalV2 via spoofed messages to ReceiverAxelar. The team pauses all contracts and warns users to halt activity.","source":"BeInCrypto","source_url":"https://beincrypto.com/crosscurve-bridge-exploit-loss/"},{"date":"2026-02","event":"CEO Boris Povar identifies 10 Ethereum addresses receiving stolen funds and issues a 72-hour SafeHarbor ultimatum offering a 10% bounty (~$300,000), threatening criminal referrals and civil litigation.","source":"BanklessTimes","source_url":"https://www.banklesstimes.com/articles/2026/02/02/crosscurve-bridge-suffers-3m-exploit-across-multiple-chains/"},{"date":"2026-02","event":"XT Exchange freezes EYWA token deposits, preventing the attacker from liquidating approximately 999.8 million minted EYWA tokens.","source":"QuillAudits","source_url":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit"},{"date":"2026-02","event":"Halborn publishes a technical analysis attributing the exploit to weak access controls in the ReceiverAxelar contract's expressExecute function.","source":"Halborn","source_url":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026"},{"date":"2026-03","event":"Hashlock audit of CrossCurve's LayerZero OFT messaging contracts concludes with a 'Secure' rating after identified issues are resolved.","source":"mexc.com","source_url":"https://www.mexc.com/news/1028361"},{"date":"2026-03","event":"QuillAudits publishes a post-mortem confirming $1,441,892.31 in liquid losses from the February exploit.","source":"QuillAudits","source_url":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit"},{"date":"2026-05","event":"PeckShield counts CrossCurve among 8 bridge exploits totaling $328.6 million year-to-date in 2026.","source":"Bitcoin.com News","source_url":"https://news.bitcoin.com/crypto-bridge-exploits-328-million-may-2026-peckshield/"}],"sources_used":[{"url":"https://crosscurve.fi/","name":"crosscurve.fi","type":"official","archive_url":"http://web.archive.org/web/20260505110527/https://crosscurve.fi/","credibility":3,"archive_timestamp":"2026-05-05T11:05:27+00:00"},{"url":"https://docs.eywa.fi/eywa-ecosystem/team","name":"docs.eywa.fi","type":"official","archive_url":"http://web.archive.org/web/20260520184747/https://docs.eywa.fi/eywa-ecosystem/team","credibility":3,"archive_timestamp":"2026-05-20T18:47:47+00:00"},{"url":"https://tracxn.com/d/companies/crosscurve/__nGqUTPDbr5mzlOWCUZlCLLaznFYA806Qh481XLIQOY8","name":"tracxn.com","type":"other","archive_url":"https://web.archive.org/web/20260829180611/https://tracxn.com/d/companies/crosscurve/__nGqUTPDbr5mzlOWCUZlCLLaznFYA806Qh481XLIQOY8#news","credibility":3,"archive_timestamp":"2026-08-29T18:06:11+00:00"},{"url":"https://crosscurve.medium.com/an-interview-with-eywa-ceo-boris-povar-92e21ae9ed07","name":"crosscurve.medium.com","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.globenewswire.com/news-release/2024/05/03/2875386/0/en/Top-VCs-Join-EYWA-s-Seed-Round-Led-by-Curve-Founder.html","name":"globenewswire.com","type":"official","archive_url":"https://web.archive.org/web/20260829090132/https://www.globenewswire.com/news-release/2024/05/03/2875386/0/en/Top-VCs-Join-EYWA-s-Seed-Round-Led-by-Curve-Founder.html","credibility":3,"archive_timestamp":"2026-08-29T09:01:32+00:00"},{"url":"https://finance.yahoo.com/news/top-vcs-join-eywas-seed-213000700.html","name":"Top VCs Join EYWA's Seed Round Led by Curve's Founder — Yahoo Finance","type":"news_article","archive_url":"http://web.archive.org/web/20260208085729/https://finance.yahoo.com/news/top-vcs-join-eywas-seed-213000700.html","credibility":2,"archive_timestamp":"2026-02-08T08:57:29+00:00"},{"url":"https://cryptorank.io/ico/eywa","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260829030548/https://cryptorank.io/ico/eywa","credibility":3,"archive_timestamp":"2026-08-29T03:05:48+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","name":"Explained: The CrossCurve Hack (February 2026) — Halborn","type":"research","archive_url":"http://web.archive.org/web/20260315165952/https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","credibility":2,"archive_timestamp":"2026-03-15T16:59:52+00:00"},{"url":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","name":"decrypt.co","type":"news_article","archive_url":"http://web.archive.org/web/20260811070706/https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","credibility":3,"archive_timestamp":"2026-08-11T07:07:06+00:00"},{"url":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit","name":"quillaudits.com","type":"research","archive_url":"http://web.archive.org/web/20260515101708/https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit","credibility":3,"archive_timestamp":"2026-05-15T10:17:08+00:00"},{"url":"https://beincrypto.com/crosscurve-bridge-exploit-loss/","name":"$3 Million Reportedly Lost in CrossCurve Bridge Exploit — BeInCrypto","type":"news_article","archive_url":"http://web.archive.org/web/20260202045605/https://beincrypto.com/crosscurve-bridge-exploit-loss/","credibility":2,"archive_timestamp":"2026-02-02T04:56:05+00:00"},{"url":"https://thecyberexpress.com/crosscurve-bridge-3m-cyberattack/","name":"$3M CrossCurve Bridge Cyberattack Exposes Validation Flaw — The Cyber Express","type":"news_article","archive_url":"http://web.archive.org/web/20260312052521/https://thecyberexpress.com/crosscurve-bridge-3m-cyberattack/","credibility":2,"archive_timestamp":"2026-03-12T05:25:21+00:00"},{"url":"https://www.cryptotimes.io/2026/02/02/crosscurve-suffers-3m-loss-in-cross-chain-bridge-breach/","name":"cryptotimes.io","type":"news_article","archive_url":"https://web.archive.org/web/20260829122121/https://www.cryptotimes.io/2026/02/02/crosscurve-suffers-3m-loss-in-cross-chain-bridge-breach/","credibility":3,"archive_timestamp":"2026-08-29T12:21:21+00:00"},{"url":"https://www.thecoinrepublic.com/2026/02/02/crypto-hack-crosscurve-warns-users-to-halt-activity-as-bridge-comes-under-attack/","name":"thecoinrepublic.com","type":"news_article","archive_url":"https://web.archive.org/web/20260829181508/https://www.thecoinrepublic.com/2026/02/02/crypto-hack-crosscurve-warns-users-to-halt-activity-as-bridge-comes-under-attack/","credibility":3,"archive_timestamp":"2026-08-29T18:15:08+00:00"},{"url":"https://www.web3isgoinggreat.com/single/crosscurve-users-exploited-for-around-3-million","name":"web3isgoinggreat.com","type":"community_report","archive_url":"http://web.archive.org/web/20260309123811/https://www.web3isgoinggreat.com/single/crosscurve-users-exploited-for-around-3-million","credibility":3,"archive_timestamp":"2026-03-09T12:38:11+00:00"},{"url":"https://finance.yahoo.com/news/crosscurve-threatens-legal-action-3m-054416969.html","name":"finance.yahoo.com","type":"news_article","archive_url":"http://web.archive.org/web/20260725192717/https://finance.yahoo.com/news/crosscurve-threatens-legal-action-3m-054416969.html","credibility":3,"archive_timestamp":"2026-07-25T19:27:17+00:00"},{"url":"https://www.mexc.com/news/1028361","name":"mexc.com","type":"news_article","archive_url":"http://web.archive.org/web/20260726155026/https://www.mexc.com/news/1028361","credibility":3,"archive_timestamp":"2026-07-26T15:50:26+00:00"},{"url":"https://www.coingecko.com/en/coins/eywa","name":"coingecko.com","type":"other","archive_url":"https://web.archive.org/web/20261028164910/https://www.coingecko.com/en/coins/eywa","credibility":3,"archive_timestamp":"2026-10-28T16:49:10+00:00"},{"url":"https://defillama-ui.vercel.app/protocol/crosscurve-(by-eywa)?denomination=USD","name":"defillama-ui.vercel.app","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptorank.io/price/eywa","name":"cryptorank.io","type":"other","archive_url":"http://web.archive.org/web/20260728191224/https://cryptorank.io/price/eywa","credibility":3,"archive_timestamp":"2026-07-28T19:12:24+00:00"},{"url":"https://chainbroker.io/projects/crosscurve/","name":"chainbroker.io","type":"other","archive_url":"https://web.archive.org/web/20260829073914/https://chainbroker.io/projects/crosscurve/","credibility":3,"archive_timestamp":"2026-08-29T07:39:14+00:00"},{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","archive_url":"http://web.archive.org/web/20260711020137/https://en.wikipedia.org/wiki/ZachXBT","credibility":3,"archive_timestamp":"2026-07-11T02:01:37+00:00"},{"url":"https://thedefiant.io/news/markets/crypto-traders-attempt-to-frontrun-zachxbt-s-upcoming-expose","name":"thedefiant.io","type":"news_article","archive_url":"http://web.archive.org/web/20260308204151/https://thedefiant.io/news/markets/crypto-traders-attempt-to-frontrun-zachxbt-s-upcoming-expose","credibility":3,"archive_timestamp":"2026-03-08T20:41:51+00:00"},{"url":"https://dev.to/ohmygod/cross-chain-bridge-security-checklist-7-lessons-from-140m-in-bridge-exploits-2025-2026-5ap3","name":"dev.to","type":"research","archive_url":"http://web.archive.org/web/20260326161522/https://dev.to/ohmygod/cross-chain-bridge-security-checklist-7-lessons-from-140m-in-bridge-exploits-2025-2026-5ap3","credibility":3,"archive_timestamp":"2026-03-26T16:15:22+00:00"},{"url":"https://www.ccn.com/news/crypto/crosscurve-bridge-exploit-3m-cross-chain-risk-hack/","name":"CrossCurve Bridge Exploit Drains About $3M, Rekindling Cross-Chain Risk — CCN","type":"news_article","archive_url":"http://web.archive.org/web/20260202130439/https://www.ccn.com/news/crypto/crosscurve-bridge-exploit-3m-cross-chain-risk-hack/","credibility":2,"archive_timestamp":"2026-02-02T13:04:39+00:00"},{"url":"https://www.theblock.co/post/387939/crosscurve-bridge-exploited-for-approximately-3-million-across-multiple-chains-via-spoofed-messages","name":"CrossCurve bridge exploited for approximately $3 million across multiple chains via spoofed messages — The Block","type":"news_article","archive_url":"http://web.archive.org/web/20260211183757/https://www.theblock.co/post/387939/crosscurve-bridge-exploited-for-approximately-3-million-across-multiple-chains-via-spoofed-messages","credibility":2,"archive_timestamp":"2026-02-11T18:37:57+00:00"},{"url":"https://www.banklesstimes.com/articles/2026/02/02/crosscurve-bridge-suffers-3m-exploit-across-multiple-chains/","name":"CrossCurve Bridge Suffers $3M Exploit Across Multiple Chains — BanklessTimes","type":"news_article","archive_url":"http://web.archive.org/web/20260514134739/https://www.banklesstimes.com/articles/2026/02/02/crosscurve-bridge-suffers-3m-exploit-across-multiple-chains/","credibility":2,"archive_timestamp":"2026-05-14T13:47:39+00:00"},{"url":"https://crypto.news/crosscurve-exploited-for-3-million-in-multi-network-bridge-attack/","name":"CrossCurve exploited for $3 million in multi-network bridge attack — Crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20260306121703/https://crypto.news/crosscurve-exploited-for-3-million-in-multi-network-bridge-attack/","credibility":2,"archive_timestamp":"2026-03-06T12:17:03+00:00"},{"url":"https://coinedition.com/crosscurve-bridge-exploited-for-3m-after-spoofed-cross-chain-messages/","name":"CrossCurve Bridge Exploited for $3M After Spoofed Cross-Chain Messages — CoinEdition","type":"news_article","archive_url":"http://web.archive.org/web/20260203100324/https://coinedition.com/crosscurve-bridge-exploited-for-3m-after-spoofed-cross-chain-messages/","credibility":2,"archive_timestamp":"2026-02-03T10:03:24+00:00"},{"url":"https://dev.to/ohmygod/the-crosscurve-3m-bridge-exploit-how-one-missing-check-let-attackers-forge-cross-chain-messages-516m","name":"The CrossCurve $3M Bridge Exploit: How One Missing Check Let Attackers Forge Cross-Chain Messages — DEV Community","type":"research","archive_url":"http://web.archive.org/web/20260329074701/https://dev.to/ohmygod/the-crosscurve-3m-bridge-exploit-how-one-missing-check-let-attackers-forge-cross-chain-messages-516m","credibility":3,"archive_timestamp":"2026-03-29T07:47:01+00:00"},{"url":"https://www.cryptopolitan.com/eywa-defi-innovation-backed-by-industry-titans/","name":"EYWA: DeFi innovation backed by industry titans — Cryptopolitan","type":"news_article","archive_url":"https://web.archive.org/web/20260725003825/https://www.cryptopolitan.com/eywa-defi-innovation-backed-by-industry-titans/","credibility":2,"archive_timestamp":"2026-07-25T00:38:25+00:00"},{"url":"https://www.crunchbase.com/funding_round/eywa-e9b6-seed--adf2938f","name":"Seed Round — CrossCurve Metelayer — Crunchbase","type":"other","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://news.bitcoin.com/crypto-bridge-exploits-328-million-may-2026-peckshield/","name":"Crypto Bridge Exploits Hit $328.6M in May as Peckshield Tracks 8 Major Incidents — Bitcoin.com News","type":"news_article","archive_url":"http://web.archive.org/web/20260610155427/https://news.bitcoin.com/crypto-bridge-exploits-328-million-may-2026-peckshield/","credibility":2,"archive_timestamp":"2026-06-10T15:54:27+00:00"},{"url":"https://www.kucoin.com/blog/top-crypto-hacks-2026-bridge-exploits","name":"Top Crypto Hacks of 2026: Bridge Exploits and Sophisticated Operations Drive Over $750 Million in Losses — KuCoin","type":"news_article","archive_url":"https://web.archive.org/web/20260725060715/https://www.kucoin.com/blog/top-crypto-hacks-2026-bridge-exploits","credibility":2,"archive_timestamp":"2026-07-25T06:07:15+00:00"},{"url":"https://www.kucoin.com/news/articles/crosscurve-bridge-exploit-3m-loss-due-to-fabricated-message-vulnerability","name":"CrossCurve Bridge Exploit: $3M Loss Due to Fabricated Message Vulnerability — KuCoin News","type":"news_article","archive_url":"http://web.archive.org/web/20260220164645/https://www.kucoin.com/news/articles/crosscurve-bridge-exploit-3m-loss-due-to-fabricated-message-vulnerability","credibility":2,"archive_timestamp":"2026-02-20T16:46:45+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-05-04T02:54:18.88328+00:00","updated_at":"2026-11-01T22:54:05.067+00:00"},"source_quality":{"total":35,"tier1":0,"tier2":3,"tier3":0,"unrated":32},"follower_count":null,"content_updated_at":"2026-11-01T22:54:06.055Z","last_fact_checked_at":"2026-11-01T22:54:05.303Z","fact_check_next_allowed_at":"2026-11-08T22:54:05.303Z","update_next_allowed_at":null}