Across Protocol Relayer Attack Caused Under $4M in Net Losses, User Funds Unaffected

3 mins mins

Across Protocol said a relayer attack resulted in less than $4 million in net losses, and that user funds were not affected by the incident.

Across Protocol Relayer Attack Caused Under $4M in Net Losses, User Funds Unaffected

The cross-chain bridging protocol described the event as a relayer attack in a statement posted to X, attributing the impact to relayer-related activity rather than to end-user wallets. For related coverage, see Coinbase Institutional Keeps Neutral Crypto Market Outlook for Q3 2026.

What Across said about the relayer attack

Relayers are the actors in Across Protocol that front capital to fulfill user transfer requests on a destination chain before being reimbursed from the source chain. That role makes relayer capital, rather than depositor balances, the part of the system exposed when something goes wrong. For related coverage, see Bitcoin Policy Institute, Palantir, Anduril Join State Freedom Tech Program.

Across framed the incident as affecting protocol infrastructure tied to relaying, and separated that from end-user balances. The protocol said the losses were confined and did not reach the funds held or moved by users. For related coverage, see KULR Technology Sells 333 Bitcoins to Repay $20M Coinbase Credit Line.

Why Across says user funds were unaffected

The central reassurance in the protocol’s follow-up statement is that deposits and transfers routed through the bridge were not compromised. That framing implies the losses were absorbed within the relaying layer rather than passed on to users. For related coverage, see Futu NiuNiu Launches Real-Time BNB Trading Service.

Because relayers advance their own capital to settle transfers, a shortfall at that layer can produce a loss for the protocol or its relayers without touching the deposits users bridge across chains. For related coverage, see World Foundation completes $52.5M WLD token financing led by Pantera Capital.

How net losses stayed below $4 million

Across quantified the impact at less than $4 million in net losses. The use of “net” rather than “gross” indicates the figure reflects the final exposure after any offsets or contained damage, not the total value that passed through the affected path.

The protocol did not, in the material reviewed, publish a line-by-line breakdown of gross exposure versus recoveries. The available statement supports only the net ceiling and the claim that users were shielded.

What the incident signals for bridge security

Relayer risk differs from smart-contract risk: a smart-contract exploit typically drains funds directly from a protocol’s contracts, while a relayer-layer loss falls on the capital those operators post to service transfers. Across’ description places this event in the latter category.

Even when user funds are safe, infrastructure incidents can weigh on confidence in cross-chain bridges, a segment that has repeatedly drawn scrutiny over security. The narrow, quantified disclosure here is the protocol’s attempt to bound that concern.

FAQ about the Across Protocol relayer attack

Did users lose money in the Across Protocol relayer attack?

No. Across said user funds were unaffected by the incident.

How much was lost?

The protocol reported less than $4 million in net losses.

What is a relayer in Across Protocol?

A relayer is an operator that advances capital to fulfill a user’s transfer on the destination chain, then gets reimbursed from the source chain.

Where did Across disclose the attack?

Across disclosed the incident and loss figure directly through its official account on X.

Additional source references: source document 1, source document 2.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.