The attacker injected false messages into Alephium TokenBridge's off-chain infrastructure and bypassed guardian validation, causing the bridge backend to accept unauthorized asset instructions. About $815,000 was publicly reported lost, highlighting the security boundary around off-chain validation and message signing.
← Back to Delta Incident Archive
VERIFIED SECURITY INCIDENT · DCI-2026-003
Alephium TokenBridge off-chain validation attack
An attacker injected false messages into off-chain bridge infrastructure and bypassed guardian validation, with reported losses of about $815,000.