Across Protocol Attack Results in Net Loss Below $4 Million, User Funds Unaffected

Across Protocol has released a security incident report regarding a Relayer attack. The attacker exploited a software vulnerability in Risk Labs' off-chain event reading on the Solana blockchain, fabricating 1,627 false deposit events totaling approximately $41.7 million. The Relayer completed 581 advances involving about $4.5 million of its own funds before pausing Solana services, while the remaining approximately $37 million in false deposits has been rendered invalid. This incident did not involve any smart contract vulnerabilities, and all user transfers were completed or fully refunded on the same day. The losses were limited to the capital of Risk Labs' own relayer, with a net loss of less than $4 million. Currently, Solana's order flow has been fully routed through CCTP, and the ACX token acquisition plan remains unaffected.