📋 New Proposal: $EYWA Token Inflation Reduction to Zero
As you already know, the launch of Router v4 in CrossCurve MetaLayer has enabled us to efficiently leverage external liquidity for cross-chain swaps and eliminate pool incentives, allowing us to focus on other key strategic areas.
With this goal in mind, a proposal has been submitted to our DAO to establish new inflation parameters:
▪️ Reduction of the per week EYWA token allocation to zero (previously 1,262,295)
➕ Taking into account the technical requirements of the contract, 100% of this zero distribution will be allocated to grants.
Vote for or against, or leave a comment 👉🏻https://app.crosscurve.fi/proposal/0e30d03a-9431-4add-921f-208da5d25ee6
As you already know, the launch of Router v4 in CrossCurve MetaLayer has enabled us to efficiently leverage external liquidity for cross-chain swaps and eliminate pool incentives, allowing us to focus on other key strategic areas.
With this goal in mind, a proposal has been submitted to our DAO to establish new inflation parameters:
▪️ Reduction of the per week EYWA token allocation to zero (previously 1,262,295)
➕ Taking into account the technical requirements of the contract, 100% of this zero distribution will be allocated to grants.
This effectively stops inflationary pressure on the EYWA token, keeping more capital in our Treasury for future high-impact strategic deployment.
Vote for or against, or leave a comment 👉🏻https://app.crosscurve.fi/proposal/0e30d03a-9431-4add-921f-208da5d25ee6
⚠️ URGENT Security Notice
Dear users,
Our bridge is currently under attack, involving the exploitation of a vulnerability in one of the smart contracts used.
Please pause all interactions with CrossCurve while the investigation is ongoing.
We appreciate your patience and cooperation. We are in contact with relevant parties, and will provide updates on the situation through our official channels.
Dear users,
Our bridge is currently under attack, involving the exploitation of a vulnerability in one of the smart contracts used.
Please pause all interactions with CrossCurve while the investigation is ongoing.
We appreciate your patience and cooperation. We are in contact with relevant parties, and will provide updates on the situation through our official channels.
Security Update on the $EYWA token
We have contained the exploit.
The hacker extracted $EYWA from our bridge on the Ethereum network but is unable to spend them since only the XT exchange had the Ethereum deposit for our token and it has been frozen.
Your $EYWA is SAFU, as are all of them on the Arbitrum network.
To be extra safe, we are in contact with all the centralized exchanges where $EYWA is traded (Kucoin, Gate, MEXC, BingX, and BitMart Exchange) to make sure that the hacker has zero options to sell or otherwise use the stolen tokens.
We are conducting a full investigation into the details of the exploit, the other tokens stolen, and how to neutralize such exploits in the future.
Thank you for your support and understanding. Please stay tuned for further announcements — we will keep you updated as the investigation progresses. 🤝
We have contained the exploit.
The hacker extracted $EYWA from our bridge on the Ethereum network but is unable to spend them since only the XT exchange had the Ethereum deposit for our token and it has been frozen.
Your $EYWA is SAFU, as are all of them on the Arbitrum network.
To be extra safe, we are in contact with all the centralized exchanges where $EYWA is traded (Kucoin, Gate, MEXC, BingX, and BitMart Exchange) to make sure that the hacker has zero options to sell or otherwise use the stolen tokens.
As such, the stolen $EYWA tokens have no way to enter circulation and affect the token supply.
We are conducting a full investigation into the details of the exploit, the other tokens stolen, and how to neutralize such exploits in the future.
Thank you for your support and understanding. Please stay tuned for further announcements — we will keep you updated as the investigation progresses. 🤝
Exploit details: how many of which tokens were taken
As we continue the investigation into the exploit of our bridge, below is a detailed breakdown of the assets stolen.
Let’s start with $EYWA. Even though it was launched on Ethereum, our native token’s entire supply was moved to Arbitrum during the TGE. Even though the hacker extracted 999,787,453.03 $EYWA to the Ethereum network, there are zero DEX pools for our token on Ethereum, the only CEX accepting Ethrereum-network $EYWA froze deposits, and we froze the exploited bridge.
Users’ Arbitrum tokens are safe and can be swapped on DEXs and CEXs as before.
The hacker did manage to extract other tokens from the bridge as follows:
Symbol — Volume:
3CRV — 2 578,22
USDT — 815 361,00
WETH — 123,59
CRV — 239 889,64
2CRV — 2 421,92
USDC — 34 820,73
WBTC — 2,64
USDB — 10 288,43
c(USD)CT — 4 199,24
frxUSD — 1 064,99
In market value, the following amounts were stolen:
From CrossCurve pools — $110,194.49
From the Units blockchain — $1,331,697.82
Total market value of stolen funds $1,441,892.31
The hacker has 72 hours to initiate contact for returning the stolen tokens. In the meantime, his identity is being tracked down via the addresses used and any associated addresses.
Here you can see every transaction of the exploit: https://docs.google.com/spreadsheets/d/166W-cWfbumiyOpLAB3rqE391fqaw8xPK8wb1WciXaXM/edit?gid=275042057#gid=275042057
We will continue to update you on the situation via our official channels. Thank you for your patience 🤝
As we continue the investigation into the exploit of our bridge, below is a detailed breakdown of the assets stolen.
Let’s start with $EYWA. Even though it was launched on Ethereum, our native token’s entire supply was moved to Arbitrum during the TGE. Even though the hacker extracted 999,787,453.03 $EYWA to the Ethereum network, there are zero DEX pools for our token on Ethereum, the only CEX accepting Ethrereum-network $EYWA froze deposits, and we froze the exploited bridge.
In short, the hacker has no way to move these tokens off Ethereum or swap them for other tokens. This means that there are now extra $EYWA tokens on the Ethereum network that in no way affect the supply on the Arbitrum network.
Users’ Arbitrum tokens are safe and can be swapped on DEXs and CEXs as before.
The hacker did manage to extract other tokens from the bridge as follows:
Symbol — Volume:
3CRV — 2 578,22
USDT — 815 361,00
WETH — 123,59
CRV — 239 889,64
2CRV — 2 421,92
USDC — 34 820,73
WBTC — 2,64
USDB — 10 288,43
c(USD)CT — 4 199,24
frxUSD — 1 064,99
In market value, the following amounts were stolen:
From CrossCurve pools — $110,194.49
From the Units blockchain — $1,331,697.82
Total market value of stolen funds $1,441,892.31
The hacker has 72 hours to initiate contact for returning the stolen tokens. In the meantime, his identity is being tracked down via the addresses used and any associated addresses.
Here you can see every transaction of the exploit: https://docs.google.com/spreadsheets/d/166W-cWfbumiyOpLAB3rqE391fqaw8xPK8wb1WciXaXM/edit?gid=275042057#gid=275042057
We will continue to update you on the situation via our official channels. Thank you for your patience 🤝
Exploit Update
In our ongoing investigation into the exploit, we have identified an additional $140,762 of stolen funds via bot-driven attacks.
Below you can see the updated table, which now includes these additional details. We remain committed to keeping the community fully informed as we continue our investigation.
📲 Details: https://docs.google.com/spreadsheets/d/166W-cWfbumiyOpLAB3rqE391fqaw8xPK8wb1WciXaXM/edit?gid=275042057#gid=275042057
We extend our condolences to everyone affected by this situation. Please stay with us and follow our updates 🤝
In our ongoing investigation into the exploit, we have identified an additional $140,762 of stolen funds via bot-driven attacks.
Below you can see the updated table, which now includes these additional details. We remain committed to keeping the community fully informed as we continue our investigation.
📲 Details: https://docs.google.com/spreadsheets/d/166W-cWfbumiyOpLAB3rqE391fqaw8xPK8wb1WciXaXM/edit?gid=275042057#gid=275042057
We extend our condolences to everyone affected by this situation. Please stay with us and follow our updates 🤝
FAQ: Answers to Your Questions
Dear community,
Over the past days, we’ve received many questions regarding the recent CrossCurve exploit. We hear you.
To help clarify the situation and reduce uncertainty, we’re publishing an FAQ with answers to the most common questions we see every day across our community channels.
📲 FAQ 👉🏻 https://medium.com/@crosscurve/faq-user-questions-following-the-crosscurve-bridge-exploit-84c7dcc7a64b
Please don’t worry and avoid speculation — all verified information will be shared directly by us.
Thank you for your patience and support.
Dear community,
Over the past days, we’ve received many questions regarding the recent CrossCurve exploit. We hear you.
To help clarify the situation and reduce uncertainty, we’re publishing an FAQ with answers to the most common questions we see every day across our community channels.
We remain fully committed to open and transparent communication. As the investigation and recovery process continue, we will keep sharing updates and expanding the available information.
📲 FAQ 👉🏻 https://medium.com/@crosscurve/faq-user-questions-following-the-crosscurve-bridge-exploit-84c7dcc7a64b
Please don’t worry and avoid speculation — all verified information will be shared directly by us.
Thank you for your patience and support.
🖋️ Unveiling the Exploit Recovery Assistance Program
Dear CrossCurve community,
As you know, the recent exploit of our bridge caused some of our users to lose funds. We express our sincere condolences to each affected person. This is exactly why, besides addressing the causes of the exploit, we are also voluntarily launching the Treasury Grant Program - a recovery plan aimed at restoring the losses of affected users.
This initiative does not constitute any obligation and is subject to our DAO’s approval.
Treasury Grant Program
The Treasury Grant Program is a voluntary recovery program (ex gratia) that CrossCurve (ex EYWA) is proposing to its DAO in connection to the bridge exploit. The program is aimed at mitigating the consequences of the exploit for the affected users in the framework of a non-custodial infrastructure, governance processes, and applicable legal limitations.
In accordance with the program terms, Protocol Revenue will be distributed on a 50%/50% basis (to grants and to the DAO, respectively) until cumulative payouts reach $100,000. Upon reaching the $100,000 threshold, the distribution will proceed according to the following allocation:
▪️ 20% of Protocol Revenue (revenue from the messaging protocol, the consensus bridge, and the MetaLayer aggregator) will go towards grants for affected users until their losses are covered (measured in USD value at the moment of the hack).
▪️ The remaining 80% of Protocol Revenue are distributed automatically among CrossCurve DAO participants, proportionally to their governance share.
The program will be claim-based in structure.
Core principles:
✔️ Confirmation via on-chain data
✔️ Use of wallet addresses and snapshots
✔️ Prevention of duplicate and fraudulent claims
✔️ Data-minimized registration by default
Additionally a separate Methodology Note will be published describing:
▪️ The snapshots used
Damage assessment logic
▪️ Distribution formulas
The proportional allocation mechanism
▪️ Measures against abuse including sybil resistance and duplicate prevention
The methodology will be verifiable and reproducible by third parties.
Additional grant via Foundation-held $EYWA tokens
Separately, since the Units blockchain was specifically affected by the hack, the CrossCurve Foundation is voluntarily granting a portion of its own locked $EYWA tokens to the Units DAO so that they can get a share of revenue distribution proportionally to their governance token share.
Timing and Distribution Details
The timing depends on the team’s workload and the volume of Protocol Revenue generated. We will publish any updates on the Treasury Grant Program via our official channels.
The full description of the mechanism of eligibility and distribution can be found in our Public Memorandum, Declaration of Good Faith & Recovery Plan.
📲 https://x.com/crosscurvefi/status/2019475142594744611
Dear CrossCurve community,
As you know, the recent exploit of our bridge caused some of our users to lose funds. We express our sincere condolences to each affected person. This is exactly why, besides addressing the causes of the exploit, we are also voluntarily launching the Treasury Grant Program - a recovery plan aimed at restoring the losses of affected users.
This initiative does not constitute any obligation and is subject to our DAO’s approval.
Treasury Grant Program
The Treasury Grant Program is a voluntary recovery program (ex gratia) that CrossCurve (ex EYWA) is proposing to its DAO in connection to the bridge exploit. The program is aimed at mitigating the consequences of the exploit for the affected users in the framework of a non-custodial infrastructure, governance processes, and applicable legal limitations.
In accordance with the program terms, Protocol Revenue will be distributed on a 50%/50% basis (to grants and to the DAO, respectively) until cumulative payouts reach $100,000. Upon reaching the $100,000 threshold, the distribution will proceed according to the following allocation:
▪️ 20% of Protocol Revenue (revenue from the messaging protocol, the consensus bridge, and the MetaLayer aggregator) will go towards grants for affected users until their losses are covered (measured in USD value at the moment of the hack).
▪️ The remaining 80% of Protocol Revenue are distributed automatically among CrossCurve DAO participants, proportionally to their governance share.
If this program is approved by the DAO vote , it will establish a mechanism to permanently channel the aforementioned protocol revenue to the DAO Treasury with subsequent distribution to token holders proportional to their share of governance tokens and facilitated via a fee switch mechanism.
The program will be claim-based in structure.
Core principles:
✔️ Confirmation via on-chain data
✔️ Use of wallet addresses and snapshots
✔️ Prevention of duplicate and fraudulent claims
✔️ Data-minimized registration by default
Additionally a separate Methodology Note will be published describing:
▪️ The snapshots used
Damage assessment logic
▪️ Distribution formulas
The proportional allocation mechanism
▪️ Measures against abuse including sybil resistance and duplicate prevention
The methodology will be verifiable and reproducible by third parties.
The team will also explore other lawful and technically feasible avenues that could improve the situation for affected users.
Additional grant via Foundation-held $EYWA tokens
Separately, since the Units blockchain was specifically affected by the hack, the CrossCurve Foundation is voluntarily granting a portion of its own locked $EYWA tokens to the Units DAO so that they can get a share of revenue distribution proportionally to their governance token share.
Timing and Distribution Details
The timing depends on the team’s workload and the volume of Protocol Revenue generated. We will publish any updates on the Treasury Grant Program via our official channels.
The full description of the mechanism of eligibility and distribution can be found in our Public Memorandum, Declaration of Good Faith & Recovery Plan.
📲 https://x.com/crosscurvefi/status/2019475142594744611
📋 New DAO Proposal: Treasury Grant Program for Exploit Recovery
Dear community,
The CrossCurve team has submitted a new proposal for consideration by our DAO, which will become available for voting in 48 hours.
This proposal formalizes the compensation mechanisms for exploit-affected users discussed in the previously published Memorandum.
The proposed Treasury Grant Program (TGP) is a voluntary ex gratia recovery program that the CrossCurve (ex EYWA) team submits for DAO consideration.
Program terms:
▪️ Phase 1: Until a cumulative payout amount of $100,000 is reached, CrossCurve Protocol Revenue will be distributed on a 50/50 basis between grants to affected users and the DAO respectively.
▪️ Phase 2: After the $100,000 threshold is reached, distribution will proceed as follows:
✔️ 20% of Protocol Revenue will be allocated to grants for affected users until their losses are fully covered, calculated in USD at the exchange rate at the time of the incident.
✔️ 80% of Protocol Revenue will be automatically distributed among $EYWA token holders in proportion to their governance share.
➕ If this program is approved by a DAO vote, a fee switch mechanism will be implemented for the continuous routing of the specified protocol revenues to the DAO, followed by distribution to token holders in proportion to their ownership share.
📲 You can review the proposal via the link below 👉🏻 https://app.crosscurve.fi/proposal/10dafc54-0083-4033-a270-153b4da43513
Dear community,
The CrossCurve team has submitted a new proposal for consideration by our DAO, which will become available for voting in 48 hours.
This proposal formalizes the compensation mechanisms for exploit-affected users discussed in the previously published Memorandum.
The proposed Treasury Grant Program (TGP) is a voluntary ex gratia recovery program that the CrossCurve (ex EYWA) team submits for DAO consideration.
The program is designed to mitigate the consequences of the incident within the framework of non-custodial infrastructure, governance processes, and applicable legal constraints.
Program terms:
▪️ Phase 1: Until a cumulative payout amount of $100,000 is reached, CrossCurve Protocol Revenue will be distributed on a 50/50 basis between grants to affected users and the DAO respectively.
▪️ Phase 2: After the $100,000 threshold is reached, distribution will proceed as follows:
✔️ 20% of Protocol Revenue will be allocated to grants for affected users until their losses are fully covered, calculated in USD at the exchange rate at the time of the incident.
✔️ 80% of Protocol Revenue will be automatically distributed among $EYWA token holders in proportion to their governance share.
➕ If this program is approved by a DAO vote, a fee switch mechanism will be implemented for the continuous routing of the specified protocol revenues to the DAO, followed by distribution to token holders in proportion to their ownership share.
We strongly encourage everyone to carefully review the full text of the proposal in order to make an informed decision and vote for or against it.
📲 You can review the proposal via the link below 👉🏻 https://app.crosscurve.fi/proposal/10dafc54-0083-4033-a270-153b4da43513
⏳ Two days left to vote on the Tresury Grant Program
As a reminder, the Treasury Grant Program (TGP) is a voluntary ex gratia recovery program to mitigate the consequences of a recent exploit for the users of our bridge.
➕ The program also establishes a mechanism to distribute up to 80% of the protocol revenue among the CrossCurve DAO participants.
The voting on it will wrap up in less than 48 hours. So please make sure to study it carefully and cast your yes or no vote before the voting closes at:
📲 https://app.crosscurve.fi/proposal/10dafc54-0083-4033-a270-153b4da43513
As a reminder, the Treasury Grant Program (TGP) is a voluntary ex gratia recovery program to mitigate the consequences of a recent exploit for the users of our bridge.
➕ The program also establishes a mechanism to distribute up to 80% of the protocol revenue among the CrossCurve DAO participants.
The voting on it will wrap up in less than 48 hours. So please make sure to study it carefully and cast your yes or no vote before the voting closes at:
📲 https://app.crosscurve.fi/proposal/10dafc54-0083-4033-a270-153b4da43513
🔄 Update: Reactivating CrossCurve Services
As we continue investigating the recent bridge exploit, our development team is gradually restoring system components — starting with those that were not affected by the incident.
Beginning today, we plan to resume services in the following order:
✅ The Aggregator is now live, with routing available via Rubic and Bungee.
▪️ Next, we will restore our Token Bridge and Consensus Bridge, with additional security measures implemented.
We will share further updates as soon as more details become available. Thank you for your patience and continued support.
📲 https://app.crosscurve.fi
As we continue investigating the recent bridge exploit, our development team is gradually restoring system components — starting with those that were not affected by the incident.
Beginning today, we plan to resume services in the following order:
✅ The Aggregator is now live, with routing available via Rubic and Bungee.
▪️ Next, we will restore our Token Bridge and Consensus Bridge, with additional security measures implemented.
The Consensus Bridge will only go live after completing all enhanced security checks.
We will share further updates as soon as more details become available. Thank you for your patience and continued support.
📲 https://app.crosscurve.fi
☑️ The Treasury Grant Program proposal has been approved by the CrossCurve DAO
Following the vote, quorum was reached and the proposal to launch the Treasury Grant Program (TGP) has been officially approved. TGP is a voluntary ex gratia compensation mechanism designed to mitigate the impact of the recent exploit on users of our bridge.
The program also introduces a framework for distributing up to 80% of protocol revenue among CrossCurve DAO participants.
📲 More details here 👉🏻https://x.com/crosscurvefi/status/2019475142594744611
At this stage, the team remains fully focused on the recovery phase. Once completed, we will proceed with implementing the technical and operational mechanisms required to launch TGP.
🤝 Thank you for your active participation and continued support.
Following the vote, quorum was reached and the proposal to launch the Treasury Grant Program (TGP) has been officially approved. TGP is a voluntary ex gratia compensation mechanism designed to mitigate the impact of the recent exploit on users of our bridge.
The program also introduces a framework for distributing up to 80% of protocol revenue among CrossCurve DAO participants.
📲 More details here 👉🏻https://x.com/crosscurvefi/status/2019475142594744611
At this stage, the team remains fully focused on the recovery phase. Once completed, we will proceed with implementing the technical and operational mechanisms required to launch TGP.
We will continue to share updates on next steps, timelines, and implementation details across our official social channels.
🤝 Thank you for your active participation and continued support.
✅ CrossCurve: Launch of the Compensation Process via PuzzleSwap
As part of the first phase of recovery, we are initiating the compensation process in collaboration with our partners at Units (Waves), leveraging the PuzzleSwap infrastructure.
The program utilizes PuzzleSwap multipools with the following assets: Waves, USDTu, WBTCu, and ETHu.
Assets required to bootstrap the pools will be acquired through auction-based limit orders, starting at $0.01 per USDTu and corresponding market-aligned starting prices for WBTCu and ETHu.
All transactions are being executed from address 3P9ULjLQoPaRQobayFALVJ38kTQKVGk9pao and can be tracked via wavesexplorer.com.
The allocated funds are not related to the Treasury Grant Program and were recovered as a result of direct communication with the hacker.
🔗 https://docs.google.com/spreadsheets/d/10OOh0t-I7FjCHvBc_HxG9f6y18PkDoruybFVQxxFihQ/edit?usp=drivesdk
This marks the first practical step within the broader compensation framework, laying the foundation for further recovery measures.
Details regarding the next phases and additional actions will be shared separately. Please stay tuned for further updates.
wavesexplorer.com
Waves Explorer | Waves Blockchain Explorer
All information about transactions, blocks, assets, addresses, nodes of the Waves blockchain
As part of the first phase of recovery, we are initiating the compensation process in collaboration with our partners at Units (Waves), leveraging the PuzzleSwap infrastructure.
The program utilizes PuzzleSwap multipools with the following assets: Waves, USDTu, WBTCu, and ETHu.
Assets required to bootstrap the pools will be acquired through auction-based limit orders, starting at $0.01 per USDTu and corresponding market-aligned starting prices for WBTCu and ETHu.
All transactions are being executed from address 3P9ULjLQoPaRQobayFALVJ38kTQKVGk9pao and can be tracked via wavesexplorer.com.
The allocated funds are not related to the Treasury Grant Program and were recovered as a result of direct communication with the hacker.
🔗 https://docs.google.com/spreadsheets/d/10OOh0t-I7FjCHvBc_HxG9f6y18PkDoruybFVQxxFihQ/edit?usp=drivesdk
The mechanism has been reviewed and approved by the most affected party — Units (Waves). It involves the creation of PuzzleSwap liquidity multipools on the Waves network, through which the subsequent buyback of depegged wrapped assets will be executed.
This marks the first practical step within the broader compensation framework, laying the foundation for further recovery measures.
Details regarding the next phases and additional actions will be shared separately. Please stay tuned for further updates.
wavesexplorer.com
Waves Explorer | Waves Blockchain Explorer
All information about transactions, blocks, assets, addresses, nodes of the Waves blockchain
💥 CrossCurve Exploit — Did It Break the Idea of Consensus?
Unfortunately, hacks in DeFi are no longer exceptions — they’re recurring events. Since the beginning of winter alone, over $112 million has been stolen.
By size, the CrossCurve incident was one of the smaller cases — but from a model perspective, it was both critical and painful.
Was exploiting the first Consensus Bridge in DeFi really that easy?
If consensus is meant to eliminate single points of failure, how did the exploit happen?
Here’s the honest answer: on one of the networks, consensus was physically never assembled.
This wasn’t a failure of the consensus mechanism. It was a harsh reminder: a single-bridge model is vulnerable by definition.
The issue isn’t the technology — it’s its availability.
📲 Read the full breakdown → https://x.com/crosscurvefi/status/2026646740590289349?s=46&t=StXDi41tmNZoFvUB-oSaHw
Weakness lives in a single bridge.
Strength lives in real consensus.
Unfortunately, hacks in DeFi are no longer exceptions — they’re recurring events. Since the beginning of winter alone, over $112 million has been stolen.
By size, the CrossCurve incident was one of the smaller cases — but from a model perspective, it was both critical and painful.
Was exploiting the first Consensus Bridge in DeFi really that easy?
If consensus is meant to eliminate single points of failure, how did the exploit happen?
Here’s the honest answer: on one of the networks, consensus was physically never assembled.
One bridge. One point of vulnerability. One attack vector.
This wasn’t a failure of the consensus mechanism. It was a harsh reminder: a single-bridge model is vulnerable by definition.
The issue isn’t the technology — it’s its availability.
We break it down without vague rhetoric:
▪️ what actually happened,
▪️ why this is a systemic market problem,
▪️ and what must change for bridges to stop being DeFi’s weakest link.
📲 Read the full breakdown → https://x.com/crosscurvefi/status/2026646740590289349?s=46&t=StXDi41tmNZoFvUB-oSaHw
Weakness lives in a single bridge.
Strength lives in real consensus.
📍 CrossCurve Product Roadmap
While the platform is in recovery mode, the CrossCurve team is actively working on an updated version of the bridge. Our goal is not only to eliminate potential vulnerabilities, but also to significantly improve the user experience and expand the protocol’s capabilities.
Here are some of the key updates currently in development:
▪️ Account Abstraction
Support for EIP-4337 and EIP-7702 standards, along with the ability to pay gas fees using any ERC-20 token.
▪️ Multichain Wallets — Frontend
Integration of Solana and Tron wallets into the CrossCurve interface with asset balances displayed across all networks. This is the first step toward adding full network support.
▪️ Aggregator Transaction Tracker
Tracking transaction statuses through aggregators (Rubic, Bungee), unified transaction history, and protection for external APIs.
▪️ Interface Improvements
UI fixes including the zero-amount confirmation dialog, SocketScan links for Bungee transactions, and improvements to modal windows.
▪️ CrossCurve SDK
SDK expansion for integrators with support for Account Abstraction and the new aggregator transaction tracking system.
▪️ Multichain Support: Tron & Solana
Adding support for Tron and Solana networks and enabling transaction processing in non-EVM networks through existing aggregator routers.
▪️ Smart Combined Routing
An intelligent routing mechanism that can combine multiple liquidity sources (exchanges, bridges, and protocols) within a single transaction.
▪️ CrossCurve Token Bridge
Re-enabling the existing CrossCurve token bridge in a mode designed for returning the remaining liquidity.
▪️ CrossCurve OFT Bridge
Launching a new version of the CrossCurve token bridge based on the LayerZero OFT standard, significantly improving the security level.
▪️ Server Transaction History
Migrating transaction history from localStorage to the backend and linking it to user accounts, allowing users to access their transaction history across all devices.
Stay tuned so you don’t miss the most important ones.
While the platform is in recovery mode, the CrossCurve team is actively working on an updated version of the bridge. Our goal is not only to eliminate potential vulnerabilities, but also to significantly improve the user experience and expand the protocol’s capabilities.
Here are some of the key updates currently in development:
▪️ Account Abstraction
Support for EIP-4337 and EIP-7702 standards, along with the ability to pay gas fees using any ERC-20 token.
▪️ Multichain Wallets — Frontend
Integration of Solana and Tron wallets into the CrossCurve interface with asset balances displayed across all networks. This is the first step toward adding full network support.
▪️ Aggregator Transaction Tracker
Tracking transaction statuses through aggregators (Rubic, Bungee), unified transaction history, and protection for external APIs.
▪️ Interface Improvements
UI fixes including the zero-amount confirmation dialog, SocketScan links for Bungee transactions, and improvements to modal windows.
▪️ CrossCurve SDK
SDK expansion for integrators with support for Account Abstraction and the new aggregator transaction tracking system.
▪️ Multichain Support: Tron & Solana
Adding support for Tron and Solana networks and enabling transaction processing in non-EVM networks through existing aggregator routers.
▪️ Smart Combined Routing
An intelligent routing mechanism that can combine multiple liquidity sources (exchanges, bridges, and protocols) within a single transaction.
▪️ CrossCurve Token Bridge
Re-enabling the existing CrossCurve token bridge in a mode designed for returning the remaining liquidity.
▪️ CrossCurve OFT Bridge
Launching a new version of the CrossCurve token bridge based on the LayerZero OFT standard, significantly improving the security level.
▪️ Server Transaction History
Migrating transaction history from localStorage to the backend and linking it to user accounts, allowing users to access their transaction history across all devices.
These updates represent only a small part of the releases planned for the near future.
Stay tuned so you don’t miss the most important ones.
🔧 CrossCurve SDK is now available for integrators
Developers can now integrate CrossCurve infrastructure directly into their applications using our SDK. The integration unlocks access to a broad cross-chain infrastructure:
🔗 25+ chains
▪️ 90+ DEXs
✔️ 40+ bridges and intent protocols
This release also introduces key improvements for building seamless cross-chain experiences:
▪️ Account Abstraction support — improved user experience with the ability to pay gas fees in any ERC-20 tokens.
▪️ Aggregated transaction tracking — enhanced visibility and monitoring across routed operations.
With the CrossCurve SDK, teams can access cross-chain liquidity and automate on-chain operations through a single infrastructure integration.
📲 SDK 👉🏻 https://www.npmjs.com/package/@crosscurve/sdk
Developers can now integrate CrossCurve infrastructure directly into their applications using our SDK. The integration unlocks access to a broad cross-chain infrastructure:
🔗 25+ chains
▪️ 90+ DEXs
✔️ 40+ bridges and intent protocols
This release also introduces key improvements for building seamless cross-chain experiences:
▪️ Account Abstraction support — improved user experience with the ability to pay gas fees in any ERC-20 tokens.
▪️ Aggregated transaction tracking — enhanced visibility and monitoring across routed operations.
With the CrossCurve SDK, teams can access cross-chain liquidity and automate on-chain operations through a single infrastructure integration.
📲 SDK 👉🏻 https://www.npmjs.com/package/@crosscurve/sdk
🛡 CrossCurve OFT Bridge audited by Hashlock
As part of strengthening CrossCurve’s infrastructure security, the updated Token Bridge with OFT support has successfully undergone its first audit. The review covered key aspects of security and the correctness of the component’s implementation.
This is just one of several important audits ahead. Stay tuned — all report links will be shared across our social channels.
As part of strengthening CrossCurve’s infrastructure security, the updated Token Bridge with OFT support has successfully undergone its first audit. The review covered key aspects of security and the correctness of the component’s implementation.
Hashlock is an Australia-based blockchain security and Web3 auditing firm with over 500 completed audits and more than $4B in secured assets. The team specializes in smart contract audits (including Solidity and Rust), cross-chain solutions, and L1/L2 protocols, and also conducts penetration testing and bug bounty programs. Their clients include 1inch, Gala, and several leading bridging protocols.
This is just one of several important audits ahead. Stay tuned — all report links will be shared across our social channels.
🛡️ CrossCurve Successfully Completes Second OFT Bridge Audit by Hexens
As part of its ongoing security efforts, CrossCurve has completed a second audit of its OFT-enabled Token Bridge module, with a focus on further validating system architecture and resilience.
🔍 Audit Results:
— 0 critical and 0 high vulnerabilities
— Identified: 1 Medium, 1 Low, and 4 informational issues
— All findings have been resolved and independently verified by the auditors
The audit confirms an overall improvement in the protocol’s security posture and code quality.
📲 Read the full report here 👉🏻 https://github.com/Hexens/Smart-Contract-Review-Public-Reports/blob/main/hexens-crosscurve-mar-26(Final).pdf
As part of its ongoing security efforts, CrossCurve has completed a second audit of its OFT-enabled Token Bridge module, with a focus on further validating system architecture and resilience.
Hexens is a leading Web3 cybersecurity firm specializing in smart contract audits, cryptography, and infrastructure security. The team has conducted hundreds of audits and employs a multi-team review approach to ensure depth and reliability of analysis.
🔍 Audit Results:
— 0 critical and 0 high vulnerabilities
— Identified: 1 Medium, 1 Low, and 4 informational issues
— All findings have been resolved and independently verified by the auditors
The audit confirms an overall improvement in the protocol’s security posture and code quality.
📲 Read the full report here 👉🏻 https://github.com/Hexens/Smart-Contract-Review-Public-Reports/blob/main/hexens-crosscurve-mar-26(Final).pdf
🛡 CrossCurve & SmartState: Router Re-Audit
As part of ongoing efforts to enhance security and expand functionality for non-EVM networks such as Solana and Tron, CrossCurve has completed a router re-audit. The review focused on updated logic and overall system integrity. No critical vulnerabilities were identified.
SmartState is a leading Web3 security firm, founded in 2019 and headquartered in Dubai. The company is recognized for its expertise in auditing DeFi and blockchain projects, providing a full suite of security services, including smart contract audits (manual, static, and dynamic analysis), with a focus on bridges, cross-chain solutions, tokens, DeFi, and GameFi. SmartState also conducts protocol-level audits (including consensus and infrastructure layers), penetration testing, and post-audit support.
📲 Read the full report here 👉https://docs.crosscurve.fi/about-crosscurve/security-audits#eywa-clp-security-audit-by-smartstate
As part of ongoing efforts to enhance security and expand functionality for non-EVM networks such as Solana and Tron, CrossCurve has completed a router re-audit. The review focused on updated logic and overall system integrity. No critical vulnerabilities were identified.
SmartState is a leading Web3 security firm, founded in 2019 and headquartered in Dubai. The company is recognized for its expertise in auditing DeFi and blockchain projects, providing a full suite of security services, including smart contract audits (manual, static, and dynamic analysis), with a focus on bridges, cross-chain solutions, tokens, DeFi, and GameFi. SmartState also conducts protocol-level audits (including consensus and infrastructure layers), penetration testing, and post-audit support.
Their clients include 1inch, TON, DAO Maker, XP.network, and others. SmartState was awarded Best Security Audit Company at WOW Summit 2022.
📲 Read the full report here 👉https://docs.crosscurve.fi/about-crosscurve/security-audits#eywa-clp-security-audit-by-smartstate
🔥 April 2026: CrossCurve at Web3 & FinTech Conferences
April is shaping up to be a busy month for CrossCurve — with ongoing audits, upcoming releases, and plenty happening behind the scenes. At the same time, we stay focused on what matters most: building relationships with potential clients and integration partners, and strengthening our real presence in the market.
This month, you’ll have a chance to meet our team in person:
📍 Paris Blockchain Week (April 15–16, Paris)
Our CEO, Boris Povar, will be there — one of Europe’s key Web3 events, bringing together founders, investors, and infrastructure projects.
📍 Money20/20 Asia (April 21–23, Bangkok)
Our BD Lead, Alexander Glukhovsky, will be attending this major fintech conference at the intersection of payments, banking, and Web3.
If you’re building a product or exploring ways to scale and grow in Web3 — let’s connect 🤝
April is shaping up to be a busy month for CrossCurve — with ongoing audits, upcoming releases, and plenty happening behind the scenes. At the same time, we stay focused on what matters most: building relationships with potential clients and integration partners, and strengthening our real presence in the market.
This month, you’ll have a chance to meet our team in person:
📍 Paris Blockchain Week (April 15–16, Paris)
Our CEO, Boris Povar, will be there — one of Europe’s key Web3 events, bringing together founders, investors, and infrastructure projects.
📍 Money20/20 Asia (April 21–23, Bangkok)
Our BD Lead, Alexander Glukhovsky, will be attending this major fintech conference at the intersection of payments, banking, and Web3.
If you’re building a product or exploring ways to scale and grow in Web3 — let’s connect 🤝
🚀 We’re live at Paris Blockchain Week 2026
One of the most influential global gatherings at the intersection of Web3, finance, and regulation is happening right now in Paris 🇫🇷
This year brings together:
✔️ 10,000+ attendees from 100+ countries
✔️ 320+ top-tier speakers
✔️ 70%+ C-level decision makers
✔️ Leading institutions across Web3 and TradFi
Our CEO, Boris Povar, is on-site to share the latest CrossCurve updates, connect with partners and ecosystem leaders, and explore new integrations and strategic collaborations.
If you’re at PBW — let’s connect.
One of the most influential global gatherings at the intersection of Web3, finance, and regulation is happening right now in Paris 🇫🇷
This year brings together:
✔️ 10,000+ attendees from 100+ countries
✔️ 320+ top-tier speakers
✔️ 70%+ C-level decision makers
✔️ Leading institutions across Web3 and TradFi
From global financial giants like J.P. Morgan, Deutsche Bank, BlackRock to industry leaders like Binance, Cardano and beyond — this is where the future of digital finance is being shaped.
Our CEO, Boris Povar, is on-site to share the latest CrossCurve updates, connect with partners and ecosystem leaders, and explore new integrations and strategic collaborations.
If you’re at PBW — let’s connect.