Blockaid: Alephium Ethereum Cross-Chain Bridge Under Attack, Approximately $815k Stolen

Deep Tide TechFlow news: On May 30, Blockaid posted on the X platform disclosing that the Alephium TokenBridge Ethereum cross-chain bridge suffered an attack. The attacker compromised 3 of the 4 Guardian keys, forged a VAA (Verifiable Action Approval), and completed the attack in about 7 minutes, stealing approximately $815,000 in assets.

During the attack, the attacker minted 13.76 million Wrapped ALPH out of thin air, exceeding 100% of the circulating supply before the attack, while also unlocking and transferring assets such as USDT, USDC, WBTC, and WETH from the custodial pool. At present, the attacker’s address still holds approximately $815,000 worth of stolen assets and 13.76 million Wrapped ALPH that are not backed by collateral, with the largest anomalous transaction being the minting of 13.76 million Wrapped ALPH out of thin air.