The CrossCurve vulnerability is being exploited—user assets are at risk

CrossCurve’s cross-chain bridge has been exploited due to a critical smart contract vulnerability. According to Odaily reports, this security incident may have resulted in tokens that should have been received by users being diverted to other addresses. The project team has declared an emergency response and is conducting an investigation to determine the full extent of the damage.

Asset Losses Caused by Bridge Vulnerability Exploitation

Cross-chain bridges are essential infrastructure for transferring assets between different blockchains. In this case, the vulnerability in the system was exploited, leading to legitimate users’ assets being mistakenly sent to other addresses.

According to the project team’s investigation, multiple addresses have been identified as receiving assets through unauthorized access due to the vulnerability. However, the team states that no malicious activity has been detected from these addresses at this time. Until the full scope of the damage is clarified, users are strongly advised to immediately cease all interactions with CrossCurve services and to stay updated through the project’s official channels.

Project Response and Safe Harbor Policy

CrossCurve is urging involved parties to cooperate in returning the stolen assets. Under the project’s Safe Harbor White Hat Policy, those who assist in recovering mistakenly transferred funds may be rewarded with up to 10% of the recovered amount.

This incentive structure is a standard approach to encourage benevolent third parties and security researchers to support the project’s recovery efforts. The team has established a framework for asset restitution and prioritizes aiding affected users.

Refund Deadline and Legal Warnings

However, the project has set a clear deadline for users. If no contact is made within 72 hours from Ethereum block height 24,364,392, or if the funds are not returned, the team warns that they will consider escalating the situation.

Specifically, measures such as filing criminal and civil lawsuits, coordinating with exchanges and stablecoin issuers to freeze assets, and conducting on-chain investigations with analytics firms may be implemented. This firm stance demonstrates the project’s commitment to preventing further asset theft through exploitation and to assisting victims.