POPA ReconAcross bridge’s relayer hacked for 1370 ETH
Across bridge’s relayer hacked for 1370 ETH RootCause: The attacker crafted deposits the relayer's bot read as real fill requests and paid out real ETH on Ethereum for, while the matching claim on Solana had nothing reimbursable behind it. Deposits got paused for exactly this reason: to stop new ones being minted. Follow the money and the intent is obvious. The main wallet was gassed from Tornado Cash, the Solana side funded through a no-KYC instant swapper. No stolen keys, no reentrancy, no flash loan. Just a function stamped "unsafe" that turned out to mean it. @EthSecurity1
The excerpt is quoted from a public Telegram channel, which owns its text.