Blockaid: Alephium Ethereum Cross-Chain Bridge Attacked, Approximately $815,000 in Assets Stolen

Odaily reported that Blockaid disclosed on X platform that the Alephium TokenBridge Ethereum cross-chain bridge has been attacked. The attacker gained control of 3 out of 4 Guardian keys, forged a VAA (Verified Authorization Message), and completed the attack within approximately 7 minutes, stealing around $815,000 in assets.

During the attack, the attacker minted 13.76 million Wrapped ALPH out of thin air, exceeding 100% of the circulating supply before the attack. At the same time, assets such as USDT, USDC, WBTC, and WETH were unlocked from the custody pool and transferred out. Currently, the attacker's address still holds approximately $815,000 in stolen assets and 13.76 million unbacked Wrapped ALPH. The largest anomalous transaction involved the minting of 13.76 million Wrapped ALPH from nothing.