Security Incident · Solana Ecosystem
Across Deposit signal spoofing
Cross-chain bridge protocol Across was attacked on its Solana deployment on July 17, 2026.
- Reported loss
- 0
- Attack category
- Deposit signal spoofing
Incident Overview
The attacker exploited a gap in Solana’s event system to spoof deposit signals, tricking relayers into paying out on fake deposits. User funds remained completely safe with zero losses; all transactions were completed or fully refunded. Losses were contained to the Risk Labs-operated relayer. The team paused Solana deposits and restored operations the next day, with a full post-mortem planned.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.