CrossCurve Bridge Exploited for $3M in Message‑Spoofing Attack

CrossCurve confirmed its cross‑chain bridge was actively under attack after an exploit drained roughly $3 million in user assets across multiple connected networks on January 31–February 1, 2026 ^[1][2].

Security analysis attributes the breach to a ReceiverAxelar contract that lacked validation checks, which allowed attackers to spoof messages and withdraw funds from PortalV2; observers compared the flaw to past bridge failures such as Nomad in 2022 ^[3][1].

Protocol maintainers paused protocol interactions following the incident, and the exploit prompted immediate scrutiny of CrossCurve — a project tied to Michael Egorov — as markets and users reacted to the announcement ^[5][2].

The incident highlights recurring vulnerabilities in cross‑chain messaging infrastructure and is under further investigation as teams work to contain the breach and assess asset impact ^[1][3].

CrossCurve’s report and subsequent analysis reinforce long‑standing concerns about the security of cross‑chain bridges; investigators and the protocol team continue to evaluate the scope and implications of the $3 million loss ^[1][3].