Question 1

How did hackers exploit the Alephium TokenBridge?

Accepted Answer

The attacker compromised three of four guardian keys and used them to sign forged Verified Action Approvals, minting 13.76 million unbacked wrapped ALPH and unlocking USDT, USDC, WBTC, and WETH from the bridge's custody contract in roughly seven minutes.

Question 2

What should Alephium liquidity providers do now?

Accepted Answer

Alephium advised all users providing liquidity to ALPH pools on Uniswap or PancakeSwap to withdraw their liquidity immediately and avoid interacting with ALPH pools until the investigation concludes.

Question 3

Were the stolen funds laundered?

Accepted Answer

On-chain analyst Specter reported that the attacker bridged stolen funds from BNB Chain to Ethereum and deposited a portion into Tornado Cash, though Blockaid noted the exploiter still held the $815,000 in drained assets and the unbacked wrapped ALPH at the time of its report.

Alephium

Alephium warns to withdraw liquidity until further notice as hackers drain $815K

One sharp brief.
Every day.

Alephium

Alephium warns to withdraw liquidity until further notice as hackers drain $815K

One sharp brief.Every day.

One sharp brief.
Every day.