Across Protocol: Solana Relayer Incident Results in Net Loss Below $4M

Across Protocol has published a post-incident report on a Relayer security event, according to Foresight News. On July 25 (UTC+8), the protocol said an attacker exploited a vulnerability in Risk Labs' off-chain event reader software on Solana, generating 1,627 fake deposit transactions with a combined face value of about $41.7 million. Before Solana services were suspended, the Relayer fronted funds for 581 of those transactions, using roughly $4.5 million of its own capital. The remaining approximately $37 million in fraudulent deposits were invalidated. The team said the incident did not involve any smart contract vulnerabilities. All user transfers were either completed or fully refunded the same day. Losses were limited to Risk Labs' Relayer capital: about $4.5 million advanced, partially offset by around $500,000 recovered from the attacker, leaving a net loss under $4 million. Across Protocol added that Solana order flow has now been fully rerouted through CCTP, and the ACX token buyback program is unaffected.