---
title: "CrossCurve bridge exploited for approximately $3 million across multiple chains via spoofed messages"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/274431601.md"
description: "CrossCurve, a cross-chain liquidity protocol, has reported an active attack on its bridge infrastructure, resulting in an exploitation of approximately $3 million across multiple networks. The vulnerability, identified as a gateway validation bypass in the ReceiverAxelar contract, allowed unauthorized token unlocks. Users are advised to pause all interactions with CrossCurve during the ongoing investigation. This incident echoes the Nomad bridge exploit of 2022, raising concerns about security in cross-chain protocols. CrossCurve, previously EYWA Protocol, emphasizes its security architecture but faces scrutiny following this breach."
datetime: "2026-02-01T21:31:31.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/274431601.md)
  - [en](https://longbridge.com/en/news/274431601.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/274431601.md)
---

> Supported Languages: [简体中文](https://longbridge.com/zh-CN/news/274431601.md) | [繁體中文](https://longbridge.com/zh-HK/news/274431601.md)


# CrossCurve bridge exploited for approximately $3 million across multiple chains via spoofed messages

Cross-chain liquidity protocol CrossCurve has confirmed that its bridge infrastructure is under active attack after a vulnerability in its smart contracts was exploited for approximately $3 million across multiple networks, according to an announcement from the project on Sunday.

"Our bridge is currently under attack, involving the exploitation of a vulnerability in one of the smart contracts used," CrossCurve said on X. "Please pause all interactions with CrossCurve while the investigation is ongoing."

Blockchain security account Defimon Alerts identified the attack vector as a gateway validation bypass in CrossCurve's ReceiverAxelar contract. According to the analysis, anyone could call the expressExecute function on the contract with a spoofed cross-chain message, bypassing the intended gateway validation and triggering unauthorized token unlocks on the protocol's PortalV2 contract.

The vulnerability is reminiscent of Nomad's $190 million bridge exploit in 2022, which saw more than 300 wallet addresses attempt to drain funds from the protocol in a feeding frenzy. "I cannot believe nothing has changed in 4 years," security expert Taylor Monahan told The Block in reference to the exploit.

Data from Arkham Intelligence shared by Defimon Alerts shows the PortalV2 contract's balance dropping from approximately $3 million to near zero around January 31, with the exploit appearing to span multiple networks.

CrossCurve, formerly known as EYWA Protocol, operates a cross-chain DEX and consensus bridge built in partnership with Curve Finance. The protocol uses what it calls a "Consensus Bridge" mechanism that routes transactions through multiple independent validation protocols, including Axelar, LayerZero, and its own EYWA Oracle Network, to reduce single points of failure.

The project had previously emphasized its security architecture as a key differentiator, noting in documentation that "the probability of several crosschain protocols getting hacked at the same time is near zero." Curve Finance founder Michael Egorov became an investor in the protocol in September 2023, and the project later said it had raised $7 million from VCs.

_This is a developing story._

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

### Related Stocks

- [Fidelity Wise Origin Bitcoin Fund (FBTC.US)](https://longbridge.com/en/quote/FBTC.US.md)
- [Riot Platforms, Inc. (RIOT.US)](https://longbridge.com/en/quote/RIOT.US.md)
- [CoinShares Bitcoin ETF (BRRR.US)](https://longbridge.com/en/quote/BRRR.US.md)
- [Coinbase Global, Inc. (COIN.US)](https://longbridge.com/en/quote/COIN.US.md)
- [Invesco Galaxy Ethereum ETF (QETH.US)](https://longbridge.com/en/quote/QETH.US.md)
- [Grayscale Bitcoin Premium Income ETF (BPI.US)](https://longbridge.com/en/quote/BPI.US.md)
- [Bitwise Crypto Industry Innovators ETF (BITQ.US)](https://longbridge.com/en/quote/BITQ.US.md)
- [Grayscale Ethereum Staking ETF (ETHE.US)](https://longbridge.com/en/quote/ETHE.US.md)
- [Bitwise Solana Staking ETF (BSOL.US)](https://longbridge.com/en/quote/BSOL.US.md)
- [ProShares Ether ETF (EETH.US)](https://longbridge.com/en/quote/EETH.US.md)
- [Siren Nasdaq NexGen Economy ETF (BLCN.US)](https://longbridge.com/en/quote/BLCN.US.md)
- [Bitwise MARA Option Income Strategy ETF (IMRA.US)](https://longbridge.com/en/quote/IMRA.US.md)
- [Hut 8 Corp. (HUT.US)](https://longbridge.com/en/quote/HUT.US.md)
- [Grayscale Ethereum Mini Staking ETF (ETH.US)](https://longbridge.com/en/quote/ETH.US.md)
- [Roundhill COIN WeeklyPay ETF (COIW.US)](https://longbridge.com/en/quote/COIW.US.md)
- [GraniteShares 2x Long MARA Daily ETF (MRAL.US)](https://longbridge.com/en/quote/MRAL.US.md)
- [YieldMax COIN Option Income Strategy ETF (CONY.US)](https://longbridge.com/en/quote/CONY.US.md)
- [Bitwise Bitcoin ETF (BITB.US)](https://longbridge.com/en/quote/BITB.US.md)
- [Bitdeer Technologies Group (BTDR.US)](https://longbridge.com/en/quote/BTDR.US.md)
- [Franklin Ethereum ETF (EZET.US)](https://longbridge.com/en/quote/EZET.US.md)
- [ProShares Bitcoin ETF (BITO.US)](https://longbridge.com/en/quote/BITO.US.md)
- [CoinShares Bitcoin & Ether ETF (BTF.US)](https://longbridge.com/en/quote/BTF.US.md)
- [Grayscale Bitcoin Miners ETF (MNRS.US)](https://longbridge.com/en/quote/MNRS.US.md)
- [Direxion Daily Crypto Industry Bull2XETF (LMBO.US)](https://longbridge.com/en/quote/LMBO.US.md)
- [Defiance Daily Target 2X Long RIOT ETF (RIOX.US)](https://longbridge.com/en/quote/RIOX.US.md)
- [Bitwise Ethereum ETF (ETHW.US)](https://longbridge.com/en/quote/ETHW.US.md)
- [Fidelity Ethereum Fund (FETH.US)](https://longbridge.com/en/quote/FETH.US.md)
- [Galaxy Digital Inc. (GLXY.US)](https://longbridge.com/en/quote/GLXY.US.md)
- [21Shares Ethereum ETF (CETH.US)](https://longbridge.com/en/quote/CETH.US.md)
- [ARK 21Shares Bitcoin ETF (ARKB.US)](https://longbridge.com/en/quote/ARKB.US.md)
- [Grayscale Bitcoin Trust ETF (GBTC.US)](https://longbridge.com/en/quote/GBTC.US.md)
- [Grayscale Solana Staking ETF (GSOL.US)](https://longbridge.com/en/quote/GSOL.US.md)
- [Bitfarms Ltd. (BITF.US)](https://longbridge.com/en/quote/BITF.US.md)
- [Grayscale Litecoin Trust (LTC) (LTCN.US)](https://longbridge.com/en/quote/LTCN.US.md)
- [Franklin Bitcoin ETF (EZBC.US)](https://longbridge.com/en/quote/EZBC.US.md)
- [iShares Ethereum Trust ETF (ETHA.US)](https://longbridge.com/en/quote/ETHA.US.md)
- [CoinShares Bitcoin Mining ETF (WGMI.US)](https://longbridge.com/en/quote/WGMI.US.md)
- [Bit Digital, Inc. (BTBT.US)](https://longbridge.com/en/quote/BTBT.US.md)
- [VanEck Ethereum ETF (ETHV.US)](https://longbridge.com/en/quote/ETHV.US.md)
- [Invesco Galaxy Bitcoin ETF (BTCO.US)](https://longbridge.com/en/quote/BTCO.US.md)
- [VanEck Bitcoin ETF (HODL.US)](https://longbridge.com/en/quote/HODL.US.md)
- [iShares Bitcoin Trust ETF (IBIT.US)](https://longbridge.com/en/quote/IBIT.US.md)
- [WisdomTree Bitcoin Fund (BTCW.US)](https://longbridge.com/en/quote/BTCW.US.md)
- [Amplify Blockchain Technology ETF (BLOK.US)](https://longbridge.com/en/quote/BLOK.US.md)
- [MARA Holdings, Inc. (MARA.US)](https://longbridge.com/en/quote/MARA.US.md)
- [Global X Blockchain ETF (BKCH.US)](https://longbridge.com/en/quote/BKCH.US.md)

## Related News & Research

- [Band Announced Partnership With Overlay Protocol](https://longbridge.com/en/news/280827501.md)
- [Resolv Halts Protocol After $80M Exploit Triggers Stablecoin Collapse](https://longbridge.com/en/news/280424027.md)
- [Chainlink Emerges as Critical Infrastructure for Tokenized Assets](https://longbridge.com/en/news/280601253.md)
- [Chainlink - Data Standard on Coinbase - 25 March 2026](https://longbridge.com/en/news/280533499.md)
- [ONFA (OFT) - ONFA Insurance Talk - 27 March 2026](https://longbridge.com/en/news/280730702.md)