Across: The net loss from the Relayer attack incident is less than 4 million dollars, and user funds were not affected

Across Protocol released a post-incident report on the Relayer security event. The attacker exploited a vulnerability in the Risk Labs Solana off-chain event reading software to fabricate 1,627 false recharge events with a total face value of approximately $41.7 million.

The report states that the Relayer completed 581 reimbursements before pausing Solana services, involving about $4.5 million of its own funds, while the remaining approximately $37 million in false recharges have all been rendered invalid.

This incident did not involve any smart contract vulnerabilities, and all user transfers were completed or fully refunded on the same day. Across Protocol stated that the losses were limited to the capital of Risk Labs' own relayers, with a net loss of less than $4 million after deducting approximately $500,000 in attacker funds. Currently, Solana's order flow has been completely routed through CCTP, and the ACX token acquisition plan remains unaffected.