Back
Across pauses Solana deposits after July 17 attack on relay nodes

Across pauses Solana deposits after July 17 attack on relay nodes

The cross-chain protocol said user funds and bridge transfers remained safe, while potential losses were limited to a Risk Labs-operated relayer and investigators traced addresses tied to the attacker.

ETH
SOL

Fact Check
Both the Odaily and Bloomingbit reports dated July 17, 2026 independently corroborate every element of the claim: the attack on Across's Solana side, safety of user funds and completed transfers, potential impact to Risk Labs operating/relay-node funds, the precautionary pause of Solana deposits with other functions normal, and cooperation with an external security firm (SEAL 911) plus a pending analysis report. The consistency across two independent sources supports a high-confidence likely_true assessment; the official Across X post could not be retrieved directly, slightly limiting primary-source verification.
    Reference: 12
Summary

Across said an attack hit its Solana deployment around 5:30 a.m. UTC on July 17, prompting the cross-chain protocol to disable Solana deposits while it investigates. The project said no user funds were affected, all bridge transactions were completed, and the protocol is otherwise operating normally. Potential losses appear limited to funds tied to a relayer operated by Risk Labs, the foundation supporting Across, reflecting the protocol’s intent-based design in which relayers front capital for transfers and are later repaid through settlement on Ethereum verified by UMA’s optimistic oracle. Across said it is coordinating with SEAL 911 to trace one Solana and two EVM addresses linked to the attacker, warned users about phishing links, and said refunds will process automatically. The team plans to publish a full post-mortem in the coming days.

Terms & Concepts
  • relayer: An entity that advances its own capital to complete a transfer and is later reimbursed by the protocol.
  • intent-based design: A system in which users specify the outcome they want and third parties fulfill it rather than relying on pooled bridge liquidity.
  • optimistic oracle: A verification mechanism that treats submitted data as valid unless it is challenged during a dispute period.