Summary
CrossCurve (formerly EYWA) is a cross-chain DeFi liquidity protocol built in partnership with Curve Finance, backed by $8.5 million in funding including a seed round led by Curve founder Michael Egorov. On February 1-2, 2026, the protocol suffered a critical smart contract exploit in its ReceiverAxelar bridge contract, resulting in an estimated $3 million in user losses across multiple chains; confirmed liquid losses were approximately $1.44 million after exchange freezes limited attacker liquidation. A subsequent Hashlock audit of separate OFT messaging contracts in March 2026 found and resolved additional vulnerabilities, and the protocol has not publicly confirmed full fund recovery from the February exploit.
Connected Entities
1 entitiesTimeline(11 events)
2021-01-01
EYWA protocol founded by Boris Povar, Faraj Abutalibov, and Peter Tagunov in Tortola, British Virgin Islands.
2023-09-01
Curve Finance founder Michael Egorov reportedly backs CrossCurve as an early investor.
2024-05-03
EYWA completes $7 million seed round led by Michael Egorov, with participation from Fenbushi Capital and GBV Capital.
2024-12-21
EYWA announces additional funding round with participation from 1inch co-founder Anton Bukov and Kenetic Fund, bringing total raised to approximately $8.5 million.
2024-12-27
EYWA token reaches all-time high of approximately $0.252.
2026-01-31
PortalV2 contract balance drops from approximately $3 million to near zero; exploit begins.
2026-02-01
CrossCurve confirms active bridge exploit across multiple networks; team pauses all contracts and warns users to halt activity.
2026-02-02
CEO Boris Povar identifies 10 Ethereum addresses receiving stolen funds, issues 72-hour ultimatum with 10% bounty offer, and threatens criminal referrals and civil litigation.
2026-02-02
XT Exchange freezes EYWA token deposits, preventing attacker liquidation of approximately 999.8 million minted EYWA tokens.
2026-03-01
CrossCurve commissions Hashlock audit of LayerZero OFT messaging contracts; audit concludes with 'Secure' rating after resolution of identified vulnerabilities.
2026-03-25
QuillAudits publishes post-mortem analysis confirming confirmed liquid losses of $1,441,892.31 from the February exploit.
Decision Log
- hash: 6tkbWUcWLHUWQ8Gu2uHdTDGkMMi9qbevZT9g8fP53o9J
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:18 AM
last updated: 5/27/2026, 7:45:49 PM
avoid.net — verified advice for a post-truth world