Verify a decision

{"actor":"system:backfill","investigation_id":"c18c86d7-2fb4-4de4-9c16-385555f1a0cb","kind":"publish","page_slug":"crosscurve","published_at":"2026-05-27T19:45:49.230Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"CrossCurve","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crosscurve.fi/","type":"other","url":""},{"credibility":3,"name":"https://docs.eywa.fi/eywa-ecosystem/team","type":"other","url":""},{"credibility":3,"name":"https://tracxn.com/d/companies/crosscurve/__nGqUTPDbr5mzlOWCUZlCLLaznFYA806Qh481XLIQOY8","type":"other","url":""},{"credibility":3,"name":"https://crosscurve.medium.com/an-interview-with-eywa-ceo-boris-povar-92e21ae9ed07","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2024/05/03/2875386/0/en/Top-VCs-Join-EYWA-s-Seed-Round-Led-by-Curve-Founder.html","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/top-vcs-join-eywas-seed-213000700.html","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/ico/eywa","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/cross-curve-exploit","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/crosscurve-bridge-exploit-loss/","type":"other","url":""},{"credibility":3,"name":"https://thecyberexpress.com/crosscurve-bridge-3m-cyberattack/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/02/02/crosscurve-suffers-3m-loss-in-cross-chain-bridge-breach/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/356599/crosscurve-legal-action-3m-cross-chain-bridge-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.thecoinrepublic.com/2026/02/02/crypto-hack-crosscurve-warns-users-to-halt-activity-as-bridge-comes-under-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/crosscurve-users-exploited-for-around-3-million","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/crosscurve-threatens-legal-action-3m-054416969.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.mexc.com/news/1028361","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-crosscurve-hack-february-2026","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/eywa","type":"other","url":""},{"credibility":3,"name":"https://defillama-ui.vercel.app/protocol/crosscurve-(by-eywa)?denomination=USD","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/price/eywa","type":"other","url":""},{"credibility":3,"name":"https://chainbroker.io/projects/crosscurve/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/markets/crypto-traders-attempt-to-frontrun-zachxbt-s-upcoming-expose","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://dev.to/ohmygod/cross-chain-bridge-security-checklist-7-lessons-from-140m-in-bridge-exploits-2025-2026-5ap3","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/news/crypto/crosscurve-bridge-exploit-3m-cross-chain-risk-hack/","type":"other","url":""}]}],"sources_used":[],"summary":"CrossCurve (formerly EYWA) is a cross-chain DeFi liquidity protocol built in partnership with Curve Finance, backed by $8.5 million in funding including a seed round led by Curve founder Michael Egorov. On February 1-2, 2026, the protocol suffered a critical smart contract exploit in its ReceiverAxelar bridge contract, resulting in an estimated $3 million in user losses across multiple chains; confirmed liquid losses were approximately $1.44 million after exchange freezes limited attacker liquidation. A subsequent Hashlock audit of separate OFT messaging contracts in March 2026 found and resolved additional vulnerabilities, and the protocol has not publicly confirmed full fund recovery from the February exploit.","timeline":[{"date":"2021-01-01","event":"EYWA protocol founded by Boris Povar, Faraj Abutalibov, and Peter Tagunov in Tortola, British Virgin Islands.","source":""},{"date":"2023-09-01","event":"Curve Finance founder Michael Egorov reportedly backs CrossCurve as an early investor.","source":""},{"date":"2024-05-03","event":"EYWA completes $7 million seed round led by Michael Egorov, with participation from Fenbushi Capital and GBV Capital.","source":""},{"date":"2024-12-21","event":"EYWA announces additional funding round with participation from 1inch co-founder Anton Bukov and Kenetic Fund, bringing total raised to approximately $8.5 million.","source":""},{"date":"2024-12-27","event":"EYWA token reaches all-time high of approximately $0.252.","source":""},{"date":"2026-01-31","event":"PortalV2 contract balance drops from approximately $3 million to near zero; exploit begins.","source":""},{"date":"2026-02-01","event":"CrossCurve confirms active bridge exploit across multiple networks; team pauses all contracts and warns users to halt activity.","source":""},{"date":"2026-02-02","event":"CEO Boris Povar identifies 10 Ethereum addresses receiving stolen funds, issues 72-hour ultimatum with 10% bounty offer, and threatens criminal referrals and civil litigation.","source":""},{"date":"2026-02-02","event":"XT Exchange freezes EYWA token deposits, preventing attacker liquidation of approximately 999.8 million minted EYWA tokens.","source":""},{"date":"2026-03-01","event":"CrossCurve commissions Hashlock audit of LayerZero OFT messaging contracts; audit concludes with 'Secure' rating after resolution of identified vulnerabilities.","source":""},{"date":"2026-03-25","event":"QuillAudits publishes post-mortem analysis confirming confirmed liquid losses of $1,441,892.31 from the February exploit.","source":""}]},"v":1}