Hack history / 2026 / Hack or exploit
CrossCurve
Hack or exploit on Feb 1, 2026 · Cross-Chain Message Spoofing
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$3M
dollars at the time
Returned
none listed
as the sources state it
Rank
#590
among thefts by dollars lost
What happened
CrossCurve's ReceiverAxelar contract failed to validate message origin, letting attackers forge cross-chain messages. Attackers crafted messages to release tokens without offsetting deposits on other chains, draining $3M across multiple blockchains.
Details
- Date
- Feb 1, 2026
- Kind
- Hack or exploit
- Method
- Cross-Chain Message Spoofing
- How in
- Bridge and cross-chain
- Target
- DeFi protocol
- Chains
- Ethereum
Related incidents
Kelp 2026 · Hack or exploit · $293M
zkLink Nova 2026 · Hack or exploit · $783K
Demex Perp 2026 · Hack or exploit · $192K
zkLink Nova 2026 · Hack or exploit · $783K
Demex Perp 2026 · Hack or exploit · $192K
Cite this page
SwanBluechip, "CrossCurve hack, Feb 1, 2026: $3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htd2c5063284/ (data as of 2026-10-31).