Skip to main content
Sign in
CrossCurve1 decision on this page

Audit log

Every state-changing event for CrossCurve: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-27 19:45:49Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,568,343
    sig
    3SRAKVtzLW8C…TMKEc92nexplorer ↗
    hash
    6tkbWUcWLHUW…8fP53o9Jsha256 → base58
    verifying row…full verify ↗
    canonical bytes (6635 B) ▸
    {"actor":"system:backfill","investigation_id":"c18c86d7-2fb4-4de4-9c16-385555f1a0cb","kind":"publish","page_slug":"crosscurve","published_at":"2026-05-27T19:45:49.230Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"CrossCurve","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crosscurve.fi/","type":"other","url":""},{"credibility":3,"name":"https://docs.eywa.fi/eywa-ecosystem/team","type":"other","url":""},{"credibility":3,"name":"https://tracxn.com/d/companies/crosscurve/__nGqUTPDbr5mzlOWCUZlCLLaznFYA806Qh481XLIQOY8","type":"other","url":""},{"credibility":3,"name":"https://crosscurve.medium.com/an-interview-with-eywa-ceo-boris-povar-92e21ae9ed07","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2024/05/03/2875386/0/en/Top-VCs-Join-EYWA-s-Seed-Round-Led-by-Curve-Founder.html","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/top-vcs-join-eywas-seed-213000700.html","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/ico/eywa","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/crosscurve-bridge-exploit-loss/","type":"other","url":""},{"credibility":3,"name":"https://thecyberexpress.com/crosscurve-bridge-3m-cyberattack/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/02/02/crosscurve-suffers-3m-loss-in-cross-chain-bridge-breach/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.thecoinrepublic.com/2026/02/02/crypto-hack-crosscurve-warns-users-to-halt-activity-as-bridge-comes-under-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/crosscurve-users-exploited-for-around-3-million","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/crosscurve-threatens-legal-action-3m-054416969.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.mexc.com/news/1028361","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/eywa","type":"other","url":""},{"credibility":3,"name":"https://defillama-ui.vercel.app/protocol/crosscurve-(by-eywa)?denomination=USD","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/price/eywa","type":"other","url":""},{"credibility":3,"name":"https://chainbroker.io/projects/crosscurve/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/markets/crypto-traders-attempt-to-frontrun-zachxbt-s-upcoming-expose","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://dev.to/ohmygod/cross-chain-bridge-security-checklist-7-lessons-from-140m-in-bridge-exploits-2025-2026-5ap3","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/news/crypto/crosscurve-bridge-exploit-3m-cross-chain-risk-hack/","type":"other","url":""}]}],"sources_used":[],"summary":"CrossCurve (formerly EYWA) is a cross-chain DeFi liquidity protocol built in partnership with Curve Finance, backed by $8.5 million in funding including a seed round led by Curve founder Michael Egorov. On February 1-2, 2026, the protocol suffered a critical smart contract exploit in its ReceiverAxelar bridge contract, resulting in an estimated $3 million in user losses across multiple chains; confirmed liquid losses were approximately $1.44 million after exchange freezes limited attacker liquidation. A subsequent Hashlock audit of separate OFT messaging contracts in March 2026 found and resolved additional vulnerabilities, and the protocol has not publicly confirmed full fund recovery from the February exploit.","timeline":[{"date":"2021-01-01","event":"EYWA protocol founded by Boris Povar, Faraj Abutalibov, and Peter Tagunov in Tortola, British Virgin Islands.","source":""},{"date":"2023-09-01","event":"Curve Finance founder Michael Egorov reportedly backs CrossCurve as an early investor.","source":""},{"date":"2024-05-03","event":"EYWA completes $7 million seed round led by Michael Egorov, with participation from Fenbushi Capital and GBV Capital.","source":""},{"date":"2024-12-21","event":"EYWA announces additional funding round with participation from 1inch co-founder Anton Bukov and Kenetic Fund, bringing total raised to approximately $8.5 million.","source":""},{"date":"2024-12-27","event":"EYWA token reaches all-time high of approximately $0.252.","source":""},{"date":"2026-01-31","event":"PortalV2 contract balance drops from approximately $3 million to near zero; exploit begins.","source":""},{"date":"2026-02-01","event":"CrossCurve confirms active bridge exploit across multiple networks; team pauses all contracts and warns users to halt activity.","source":""},{"date":"2026-02-02","event":"CEO Boris Povar identifies 10 Ethereum addresses receiving stolen funds, issues 72-hour ultimatum with 10% bounty offer, and threatens criminal referrals and civil litigation.","source":""},{"date":"2026-02-02","event":"XT Exchange freezes EYWA token deposits, preventing attacker liquidation of approximately 999.8 million minted EYWA tokens.","source":""},{"date":"2026-03-01","event":"CrossCurve commissions Hashlock audit of LayerZero OFT messaging contracts; audit concludes with 'Secure' rating after resolution of identified vulnerabilities.","source":""},{"date":"2026-03-25","event":"QuillAudits publishes post-mortem analysis confirming confirmed liquid losses of $1,441,892.31 from the February exploit.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 781ae5e1-7344-454c-a968-75fb22c24450
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.