The post Crypto protocol CrossCurve suffers $3M exploit appeared on BitcoinEthereumNews.com.

Crypto protocol CrossCurve has revealed that its cross-chain bridge was compromised, resulting in a loss of about $3 million across various blockchain networks.  The attack has raised new security concerns about cross-chain infrastructure, which hackers have repeatedly targeted in the crypto industry. CrossCurve revealed the attack late Sunday in a post on X, stating that its bridge was “under attack” and that a vulnerability in its smart contracts had been exploited.  The protocol warned users to immediately pause all interactions with CrossCurve while the team looks into what happened. The exploit affected several networks and demonstrated the impact that weaknesses can have on cross-chain systems. Details about the exploit were provided by Defimon Alerts, an X account belonging to a blockchain security firm, Decurity. The attacker compromised one of CrossCurve’s smart contracts and stole approximately $3 million, according to Defimon Alerts.  The report also said CrossCurve’s contract did not properly verify cross-chain messages. This enabled any party to spoof, or fake, a genuine-looking message. Thus, the attacker was able to circumvent the traditional validation mechanism and unlock tokens without authorization. More specifically, Defimon Alerts mentioned that anyone can invoke a function called expressExecute in the ReceiverAxelar contract.  This function exploited a phony cross-chain message and bypassed gateway checks by calling it and unlocking tokens on the PortalV2 contract. It trusted that message, and funds were released even after no transaction was made in the original chain. CrossCurve didn’t challenge any of that work, and is also investigating affected contracts.  The protocol has not yet confirmed whether all users will receive compensation for their losses. In a post on X, Curve advised users whose voting powers were granted to CrossCurve pools to review their positions and consider removing their votes. It also recommends that all investors stay on watch and make…

---

Filed under: News - @ February 2, 2026 2:10 am