Great work by the @alephium team together with @blockaid_ & @SEAL_911
TLDR; Alephium has successfully invalidated the unbacked wrapped $ALPH held in the attacker's wallet and is mapping all affected users and LPs for recovery.
Bridge Update
Today, we continued work across multiple recovery and investigation tracks.
▪️As part of the bridge incident remediation, the bridge guardians, with support from our security partners, executed an authorized recovery procedure to invalidate the unbacked wrapped ALPH held in the attacker's wallet. This action applied exclusively to unauthorized wrapped ALPH created through the exploit and held by the attacker. It did not affect native ALPH, legitimately backed wrapped ALPH held by users, or addresses that unknowingly acquired unbacked wrapped ALPH through trading activity following the exploit. It also did not affect the Alephium L1 consensus rules. Removing these exploit-created assets from the attacker's control is an important step in the ongoing recovery and remediation process.
▪️ We are advancing the recovery path for legitimate wrapped ALPH holders and have identified all eligible holders via snapshot.
▪️We are confirming the addresses of liquidity providers affected by the exploit, including LPs currently providing liquidity on Uniswap and PancakeSwap, as well as addresses that unknowingly traded against the attacker's transactions.
▪️We have submitted an incident report to Switzerland's National Cyber Security Centre (NCSC) and are coordinating with the relevant law enforcement authorities.
▪️We continue to work closely with @Blockaid_, @SEAL_911, and other investigation partners to trace assets and assess possible recovery opportunities.
▪️In parallel, work continues on the bridge recovery plan, technical remediation, legal and criminal investigation efforts, and the preparation of the full postmortem.
▪️Below, we have published a comprehensive on-chain analysis covering the exploit timeline, affected transactions, fund movements, and the current location of the drained assets.
Read the on-chain report here: https://t.co/dm4xGqhO6K
We will share further updates as the situation develops.
My heart goes out to the #Alephium team due to the TokenBridge #hack but I'm sure that they will manage this incident with the utmost professionalism. I urge people to wait for the full technical postmortem and to remember that pressure creates diamonds and adversity creates character!
https://t.co/NI0qL5ldqs
Built to last! Check out this great article by @MEXC on @alephium - the PoW L1 hiding in plain sight. As laid out in the article, #Alephium is far from dead as new infrastructure continues to deploy. https://t.co/cwTdrHXyXH
If 20 years in cybersecurity has taught me anything, it's this; security cannot be an afterthought, it must be there from the start. That's why I love the Alephium way; Secure by Design!
@alephium Secure by design. This is the only way forward if we're to get the masses adopt #Web3 & #DeFi. This is also why I'm still bullish on #Alephium - it's miles ahead others in this design philosophy.
@oct_gems This was really interesting and well written review. I agree that @alephium's position is unusual in 2026 and it has a compelling design. Also 100% agree that $ALPH is a good buy if you're playing the long game instead of seeking quick wins.
@alephium Exactly! While KOL's like @elliotrades & @coinbureau are streaming on how crypto hacks are destroying Ethereum & Altcoins, why not look for safer models for DeFi, like @alephium ???