Across Protocol: Net loss from the Relayer attack incident is below $4 million, and user funds were not affected

Odaily Planet Daily reports that Across Protocol has released a post-incident report on a Relayer security event. The attacker exploited a vulnerability in Risk Labs’ off-chain software related to a Solana incident, forging 1,627 fake deposit events with a total value of about $41.7 million.

The report says that the Relayer completed 581 advance-cover payments before pausing Solana services, involving about $4.5 million of its own funds; the remaining about $37.0 million in fake deposits has all been invalidated. The incident did not involve any smart contract vulnerability, and all user transfers were completed on the same day or fully refunded.

Across Protocol states that the losses are limited to the capital held in Risk Labs’ own relayer infrastructure. After deducting about $0.5 million of the attacker’s funds, the net loss is less than $4 million. Currently, Solana order flow has been switched to route fully through CCTP, and the ACX token acquisition plan is unaffected.