Across Protocol said a relayer attack resulted in less than $4 million in net losses, and that user funds were not affected by the incident.
The cross-chain bridging protocol described the event as a relayer attack in a statement posted to X, attributing the impact to relayer-related activity rather than to end-user wallets.
What Across said about the relayer attack
Relayers are the actors in Across Protocol that front capital to fulfill user transfer requests on a destination chain before being reimbursed from the source chain. That role makes relayer capital, rather than depositor balances, the part of the system exposed when something goes wrong.
Across framed the incident as affecting protocol infrastructure tied to relaying, and separated that from end-user balances. The protocol said the losses were confined and did not reach the funds held or moved by users.
Why Across says user funds were unaffected
The central reassurance in the protocol’s follow-up statement is that deposits and transfers routed through the bridge were not compromised. That framing implies the losses were absorbed within the relaying layer rather than passed on to users.
Because relayers advance their own capital to settle transfers, a shortfall at that layer can produce a loss for the protocol or its relayers without touching the deposits users bridge across chains.
How net losses stayed below $4 million
Across quantified the impact at less than $4 million in net losses. The use of “net” rather than “gross” indicates the figure reflects the final exposure after any offsets or contained damage, not the total value that passed through the affected path.
The protocol did not, in the material reviewed, publish a line-by-line breakdown of gross exposure versus recoveries. The available statement supports only the net ceiling and the claim that users were shielded.
What the incident signals for bridge security
Relayer risk differs from smart-contract risk: a smart-contract exploit typically drains funds directly from a protocol’s contracts, while a relayer-layer loss falls on the capital those operators post to service transfers. Across’ description places this event in the latter category.
Even when user funds are safe, infrastructure incidents can weigh on confidence in cross-chain bridges, a segment that has repeatedly drawn scrutiny over security. The narrow, quantified disclosure here is the protocol’s attempt to bound that concern.
FAQ about the Across Protocol relayer attack
Did users lose money in the Across Protocol relayer attack?
No. Across said user funds were unaffected by the incident.
How much was lost?
The protocol reported less than $4 million in net losses.
What is a relayer in Across Protocol?
A relayer is an operator that advances capital to fulfill a user’s transfer on the destination chain, then gets reimbursed from the source chain.
Where did Across disclose the attack?
Across disclosed the incident and loss figure directly through its official account on X.
Additional source references: source document 1, source document 2.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
