Across Protocol Reports $41M Fake Deposit Attack on Relayer Service

Across Protocol has released a report detailing a security incident involving its Relayer service. The attacker exploited an off-chain software vulnerability in Risk Labs Solana to forge 1,627 fake deposits with a total nominal value of 41.7 million US dollars.

Before suspending services, Relayer covered 581 transactions involving 4.5 million US dollars of its own funds. The remaining 37 million US dollars worth of fake deposits have been invalidated, and user funds were not affected.

After deducting the attacker's funds, the net loss is below $4 million. Solana order flows have now been rerouted through CCTP, and the ACX token acquisition plan remains unaffected.