Leaderboard
424All-time rank
CrossCurve
Feb 1, 2026
$3.0M
Lost
$3.0M
Recovered
$0
Net loss
$3.0M
Unrecovered0% recovered
CrossCurve's ReceiverAxelar contract failed to validate message origin, letting attackers forge cross-chain messages. Attackers crafted messages to release tokens without offsetting deposits on other chains, draining $3M across multiple blockchains.
- Target
- Bridge
- Classification
- Bridge & Cross-Chain
- Technique
- Cross-Chain Message Spoofing
- Attribution
- Unknown
- Chains
Event timeline
- Feb 1, 2026Exploit executed — $3.0M drained via cross-chain message spoofing
- Attributed to Unknown
- Recovery status Unrecovered 0%