CrossCurve Bridge Exploited for $3 Million Through Smart Contract Validation Flaw

TLDR: CrossCurve’s ReceiverAxelar contract lacked validation checks, enabling attackers to spoof messages.  The exploit drained approximately $3 million from PortalV2 across multiple blockchain networks.  Security experts compare the incident to Nomad’s 2022 bridge hack that lost $190 million in funds.  Curve Finance advised users to review positions in EYWA-related pools following the security breach.   [...]

The post CrossCurve Bridge Exploited for $3 Million Through Smart Contract Validation Flaw appeared first on Blockonomi.