Across Protocol relayer loses under $4M in Solana attack

Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-chain protocol. Summary 1,627 fake deposits worth $41.7 million targeted 18 chains during the Solana attack. Risk Labs’ relayer paid $4.5 million across 581 fraudulent requests before suspending service. Around $500,000 in attacker funds remained trapped, reducing the net loss below $4 million. Across restored Solana transfers through CCTP, while user funds and the ACX buyback remained unaffected. Across attacker forged 1,627 Solana deposits The attack occurred between 05:07 and 06:14 UTC on July 17, according to the Across Protocol post-mortem. The attacker used 1,627 single-use Solana wallets to create the same number of fake deposit events. Those deposits carried a combined face value of approximately $41.7 million and requested payments across 18 destination chains. Across reported that the funds were directed toward one recipient address on an Ethereum Virtual Machine-compatible network. Risk Labs’ relayer filled 581 requests before Across stopped Solana operations. Those payments r...