CrossCurve
Last changed 2026-11-01 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -3.3 |
| Long-running | +10 |
| Regulated | +5 |
| Sum | 57 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 67/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-01 · 4 of 8 claims confirmed · 3 need better sources · 1 disputed
anchored·3SRAKV…c92nSummary
CrossCurve (formerly EYWA) is a cross-chain DeFi liquidity protocol built with Curve Finance and backed by about $8.5 million in funding, including a seed round led by Curve founder Michael Egorov. On 1-2 February 2026 an access-control flaw in its ReceiverAxelar contract let an attacker forge cross-chain messages and drain PortalV2 contracts on multiple chains; reported losses range from about $3 million to $1.44 million in confirmed liquid losses after XT Exchange froze minted EYWA tokens. The team offered a 10% SafeHarbor bounty and threatened legal action, but no fund recovery had been publicly confirmed as of May 2026.
Connected Entities
17 entities · 60 linked investigations- Mantle→mentioned with→Ethereum(80%)
- Mantle→mentioned with→Polygon(60%)
- Optimism→mentioned with→Arbitrum(65%)
- ZachXBT→mentioned with→Ethereum(70%)
- Optimism→mentioned with→Ethereum(80%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Arbitrum(70%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Drift(85%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→THORChain(70%)
- ZachXBT→mentioned with→Binance(60%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Ethereum(80%)
- + 50 more
1 submission awaiting moderator review.
Timeline(13 events)
2021
EYWA founded by Boris Povar, Faraj Abutalibov and Peter Tagunov; registered in Tortola, British Virgin Islands.
docs.eywa.fiSeptember 2023
Curve Finance founder Michael Egorov reportedly invests in EYWA Protocol (CrossCurve's predecessor), establishing the Curve partnership.
CryptopolitanMay 2024
EYWA completes a $7 million seed round led by Michael Egorov, with participation from Fenbushi Capital, GBV Capital, Big Brain Holdings, Marshland Capital and Mulana Capital.
Yahoo Finance / The DefiantDecember 2024
EYWA announces an additional funding round with 1inch co-founder Anton Bukov and Kenetic Fund, bringing total raised to approximately $8.5 million.
cryptorank.ioJanuary 2026
PortalV2 contract balance reportedly drops from approximately $3 million to near zero (Arkham Intelligence data), about one day before the public announcement.
Crypto.news (citing Arkham Intelligence)February 2026
CrossCurve confirms its bridge is under active attack across multiple networks; approximately $3 million drained from PortalV2 via spoofed messages to ReceiverAxelar. The team pauses all contracts and warns users to halt activity.
BeInCryptoFebruary 2026
CEO Boris Povar identifies 10 Ethereum addresses receiving stolen funds and issues a 72-hour SafeHarbor ultimatum offering a 10% bounty (~$300,000), threatening criminal referrals and civil litigation.
BanklessTimesFebruary 2026
XT Exchange freezes EYWA token deposits, preventing the attacker from liquidating approximately 999.8 million minted EYWA tokens.
QuillAuditsFebruary 2026
Halborn publishes a technical analysis attributing the exploit to weak access controls in the ReceiverAxelar contract's expressExecute function.
HalbornMarch 2026
Hashlock audit of CrossCurve's LayerZero OFT messaging contracts concludes with a 'Secure' rating after identified issues are resolved.
mexc.comMarch 2026
QuillAudits publishes a post-mortem confirming $1,441,892.31 in liquid losses from the February exploit.
QuillAuditsMay 2026
PeckShield counts CrossCurve among 8 bridge exploits totaling $328.6 million year-to-date in 2026.
Bitcoin.com NewsDecision Log
- slot 464267311 · hash C44QCYziSeL8g5UkFnBW2V3ab466WYUgwuNLuqnia3mN
- slot 464267306 · hash At1kkM64Eae9CKSef3FS7kzrumtjK98d9PtgEBS32Tg3
- slot 464266870 · hash ACfyQ6WmZH9PmsibXPUsYRD65xTvaLDfaA4P6qrhjhzA
- slot 455367103 · hash B58kkQsPNitaJnnD1PtZekoxHiHJhZ7nAysZ9rB4hp7A
- slot 422568343 · hash 6tkbWUcWLHUWQ8Gu2uHdTDGkMMi9qbevZT9g8fP53o9J
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 32 of 35 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 5/4/2026, 2:54:18 AM
last updated: 11/1/2026, 10:54:06 PM
5 viewsavoid.net — verified advice for a post-truth world