Blockaid: Alephium Ethereum cross-chain bridge attacked, approximately $815,000 in assets stolen

Odaily Planet Daily reports that Blockaid disclosed on the X platform that the Alephium TokenBridge Ethereum cross-chain bridge was attacked. The attacker controlled 3 out of the 4 Guardian keys to forge a VAA (Verified Action Approval) and completed the attack in about 7 minutes, stealing approximately $815,000 in assets.

During the attack, the attacker minted 13.76 million Wrapped ALPH out of thin air, exceeding 100% of the circulating supply before the attack. At the same time, assets such as USDT, USDC, WBTC, and WETH were unlocked and transferred out from the custody pool. Currently, the attacker's address still holds approximately $815,000 in stolen assets and 13.76 million unbacked Wrapped ALPH. The largest anomalous transaction among these was the out-of-thin-air minting of 13.76 million Wrapped ALPH.