Across Protocol relayer loses under $4M in Solana attack

cryptonews07-25 16:06

Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2654407056?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-07-25 16:06","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2654407056","market":"nz","top_or_hot":-1,"title":"Across Protocol relayer loses under $4M in Solana attack","media":"cryptonews","content":"<div>\n<p>Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-...</p>\n\n<a href=\"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Across Protocol relayer loses under $4M in Solana attack</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nAcross Protocol relayer loses under $4M in Solana attack\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-07-25 16:06 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-...</p>\n\n<a href=\"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"SOLC","symbol_name":"Canary Marinade Solana ETF","start_time":0,"source_url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/","article_id":"2654407056","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/across-protocol-relayer-lose-under-4m-in-solana-attack/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2654407056","pubTimestamp":1784966785,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-chain protocol.1,627 fake deposits worth $41.7 million targeted 18 chains during the Solana attack.Risk Labs’ relayer paid $4.5 million across 581 fraudulent requests before suspending service.Around $500,000 in attacker funds remained trapped, reducing the net loss below $4 million.Across restored Solana transfers through CCTP, while user funds and the ACX buyback remained unaffected.Risk Labs’ relayer paid approximately $4.5 million against 581 fake deposits before Across suspended the affected service. Around $500,000 belonging to the attacker remained trapped inside the protocol, reducing the net loss below $4 million.Across attributed the breach to its Solana off-chain event-reading software rather than a flaw in its smart contracts. The protocol reported that no users lost funds and th","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"SOLC":"Canary Marinade Solana ETF","SSK":"Rex-Osprey SOL + Staking ETF","SOLZ":"Solana ETF","SOEZ":"Franklin Solana ETF","SSS":"Cyber Hornet S&P 500 and Solana 75/25 Strategy ETF","FSOL":"Fidelity Solana Fund","GSOL":"Grayscale Solana Trust ETF","QSOL":"Invesco Galaxy Solana ETF","BSOL":"Bitwise Solana Staking ETF","TSOL":"21Shares Solana ETF","SOLM":"Amplify Solana 3% Monthly Option Income ETF","SOLT":"2x Solana ETF","SLON":"ProShares Ultra Solana ETF","VSOL":"VanEck Solana ETF","SOLX":"T-REX 2X Long SOL Daily Target ETF"},"translate_title":"跨协议中继器在 Solana 攻击中损失不到 400 万美元","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"GSOL":1.5,"QSOL":1.5,"SOLC":1.5,"SOLX":1.5,"SOLZ":0.9,"SSS":1.5,"BSOL":1.5,"SSK":1.5,"SOEZ":1.5,"SOLT":1.5,"FSOL":1.5,"TSOL":1.5,"SOLM":1.5,"SLON":1.5,"VSOL":1.5},"content_text":"Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-chain protocol.\n\n\nSummary\n\n\n\n1,627 fake deposits worth $41.7 million targeted 18 chains during the Solana attack.\nRisk Labs’ relayer paid $4.5 million across 581 fraudulent requests before suspending service.\nAround $500,000 in attacker funds remained trapped, reducing the net loss below $4 million.\nAcross restored Solana transfers through CCTP, while user funds and the ACX buyback remained unaffected.\n\n\n\nRisk Labs’ relayer paid approximately $4.5 million against 581 fake deposits before Across suspended the affected service. Around $500,000 belonging to the attacker remained trapped inside the protocol, reducing the net loss below $4 million.\nAcross attributed the breach to its Solana off-chain event-reading software rather than a flaw in its smart contracts. The protocol reported that no users lost funds and that every legitimate transfer was completed or fully refunded on the day of the attack.\nAcross attacker created 1,627 fake Solana deposits\nThe attack occurred between 05:07 and 06:14 UTC on July 17, according to the Across Protocol post-mortem. During that 67-minute period, the attacker used 1,627 single-use Solana wallets to submit the same number of fabricated deposits.\nThose deposits had a combined face value of approximately $41.7 million and directed payments across 18 destination chains. Across reported that the funds ultimately flowed toward one recipient on an Ethereum Virtual Machine-compatible network.\nRisk Labs’ relayer filled 581 of the fraudulent requests, representing about 35.7% of the total. However, the $4.5 million paid out accounted for only about 10.8% of the attempted face value.\nAcross stopped Solana operations before the remaining 1,046 requests could be filled. The protocol invalidated approximately $37 million in unpaid fake deposits, preventing those requests from producing further losses.\nThe report identified the root cause as a bug in Risk Labs’ relayer codebase. Because the affected software operated off-chain, the attacker did not alter Across’ on-chain contracts or exploit Solana’s underlying network.\nWhy Across users avoided losses\nAcross uses relayers that advance their own capital to complete cross-chain orders before seeking reimbursement. This structure placed the immediate financial exposure on Risk Labs’ relayer rather than users transferring assets through the protocol.\nThe protocol reported that all legitimate transfers were completed or refunded on July 17. Across had processed more than $34 billion in bridge volume without losing user funds, according to figures published on its website.\nThe incident differs from the Lien Finance attack reported by crypto.news on July 24. Lien Finance lost approximately 542,144.63 USDC after an attacker exploited its bond exchange logic to mint unsupported tokens without destroying the required input bonds.\nSlowMist traced the Lien Finance vulnerability to incomplete checks in the exchangeEquivalentBonds function. Unlike the Across incident, that attack involved smart contract logic and allowed the attacker to exchange unbacked bond tokens for USDC held by the affected liquidity source.\nThe Across disclosure also arrived as stolen assets from an earlier Solana breach began moving. As crypto.news reported, a wallet tied to the $285 million Drift Protocol exploit transferred 23,095.1 ETH, worth about $44.4 million, into Tornado Cash on July 23 and July 24.\nACX trades near $0.041 after the report\nACX was trading at approximately $0.04135 at the time of writing, down 2.8% over 24 hours and 2.3% over seven days, according to CoinGecko.\nThe token had a market capitalization of about $29.1 million and a 24-hour trading volume of approximately $3.3 million. ACX remained nearly 97.6% below its all-time high of $1.69.\nAcross stated that the relayer loss would not change its planned ACX token buyback. The protocol did not disclose whether the incident would affect Risk Labs’ other spending or relayer operations.\nSolana service moves to CCTP routing\nAcross deployed a root-cause fix about five hours after the attack and restored Solana service in approximately 12 hours through its fallback CCTP route.\nAll Solana order flow now uses Circle’s Cross-Chain Transfer Protocol, which transfers native USDC between supported networks through a burn-and-mint process. Across has not provided a timeline for restoring its previous Solana routing system.\nThe protocol’s next steps include maintaining the CCTP route and monitoring the attacker-linked funds. Its report did not announce any recovery agreement, arrest, or confirmed identity for the attacker.\n\n\n\n\n\n                Read more:\n            \n\n                Crypto token unlocks: $77M in BEAT, EIGEN, ZETA hitting markets Aug. 1","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.46.0","shortVersion":"4.46.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2654407056","isCrawlerRequest":true}