CrossCurve cross-chain bridge was attacked; a 72-hour white-hat window has been opened and a bounty of up to 10% is offered.

CrossCurve issued a statement saying that its cross-chain bridge was attacked, with the attackers exploiting a vulnerability in a smart contract. The project team has requested users to immediately suspend all interaction with CrossCurve until the investigation is complete and stated that it will continue to disclose progress through official channels. The project team subsequently confirmed that some addresses received token funds that should have belonged to users due to the vulnerability. CrossCurve stated that no malicious intent has been found in the relevant addresses and appealed for cooperation in returning the wrongly transferred assets. According to its Safe Harbor white-hat policy, white-hat hackers who assist in recovering funds can retain up to 10% as a bounty. The announcement stated that if funds are not returned or effective contact is not made within 72 hours from Ethereum block height 24,364,392, the project team will escalate the situation as appropriate, including initiating criminal and civil proceedings and working with trading platforms, stablecoin issuers, and on-chain analytics firms to freeze or track the relevant assets.