Key Points
- CrossCurve halted a bridge exploit, freezing unauthorized EYWA tokens and preventing market circulation.
- Exchanges were alerted, wallets flagged, and potential legal action outlined if funds are not returned.
CrossCurve confirmed it contained a cross-chain bridge exploit affecting its token system, formerly known as EYWA.
The attack targeted the Ethereum side of the bridge, where a smart contract flaw enabled unauthorized token releases.
According to the team, the extracted tokens cannot be transferred or sold due to restricted deposit routes.
Only one centralized exchange supported Ethereum deposits for the token, and that channel was frozen shortly after detection.
Tokens on other networks, including Arbitrum, were not affected, and no additional supply entered circulation.
Exchange Response and Wallet Tracking
The protocol contacted multiple centralized exchanges where EYWA trades, requesting safeguards against any movement of the compromised tokens.
It stated that the stolen supply cannot circulate and is not expected to affect overall token supply or pricing.
CrossCurve reported identifying ten Ethereum addresses associated with the exploit, attributing the incident to bridge logic failure rather than user behavior.
The identified wallets were given a 72-hour window to return the funds or initiate contact.
If unresolved, the process is expected to escalate into legal action, including coordination with exchanges, investigators, and blockchain analytics firms.
Exploit Mechanics and Broader Context
Security firms explained that the attacker used a forged cross-chain message that bypassed validation checks within the bridge contract.
Estimates placed total losses between approximately $2.7 million and $3 million across several networks, with the largest portion on Ethereum.
The incident occurred during a month marked by elevated crypto-related losses, driven largely by phishing and social engineering schemes.
Industry data showed January totals significantly exceeded figures from both the prior month and the same period a year earlier.
A separate breach at Step Finance represented the largest technical exploit of the month, involving compromised treasury wallets and substantial asset drainage.
