Flash
Alephium Ethereum Cross-Chain Bridge was attacked and approximately $815,000 in assets stolen
AlephiumTokenBridge Ethereum Cross-Chain Bridge has been attacked. By controlling three of the four Guardian keys, the attacker forged VAA (Verification Authorization Message) and completed the attack in approximately 7 minutes, stealing approximately $815,000 in assets. During the attack, the attacker forged 13.76 million packaged ALPH (WrappedALPH) out of thin air, exceeding 100% of the supply in circulation before the attack, and unlocked and transferred assets such as USDT, USDC, WBTC and WETH from the managed pool. Currently, the attacker's address still holds approximately US$815,000 in stolen assets and 13.76 million unsecured backed encapsulated ALPH, the largest of which is the creation of 13.76 million encapsulated ALPH out of thin air.