Blockaid Identifies Active Attack on WAX Bridge
Security researchers flagged unauthorized token releases across the WAX, Solana, and Ethereum blockchain networks.
Updated on Oct. 23, 2026 in Cybersecurity
Live Poll
Do you trust the security of cross-chain bridges for managing your digital assets?
Blockaid detected an active exploit on the WAX multichain bridge where an attacker triggered the release of mapped tokens without providing payment. The unauthorized activity spanned across five distinct transactions on the Solana and Ethereum networks.
Why it matters
The incident highlights critical vulnerabilities in cross-chain bridge security, where failures in payment validation allow attackers to siphon assets from supported networks. Such breaches threaten the integrity of interoperable decentralized finance platforms.
The attack involved five transactions that successfully bypassed payment requirements on the WAX network. These transactions resulted in the unauthorized release of 52,986 USDC, 21,558 USDT, 840 DAI, 2.55 WETH, and 0.11 WBTC.
The players
Blockaid
Blockaid is a cybersecurity firm that specializes in identifying and mitigating threats within the Web3 and blockchain ecosystem.
WAX
WAX is a decentralized blockchain network designed to facilitate the creation and trade of digital assets and non-fungible tokens.
Solana
Solana is a high-performance blockchain network known for its support of decentralized applications and crypto asset transactions.
Ethereum
Ethereum is a global, open-source blockchain platform that supports smart contracts and a wide range of decentralized applications.
The details
The attacker leveraged a flaw in the bridge protocol to trigger asset releases on the Solana and Ethereum networks while skipping the mandatory payment step on the WAX side. This gap in the verification mechanism allowed the assets to be moved without corresponding value being locked on the source chain.
Timeline
October 22, 2026: Blockaid identified and flagged the active attack on the WAX bridge.
The Tech Race
The vulnerability of cross-chain bridges remains a primary target for malicious actors looking to bypass network-specific security protocols. This incident follows a pattern set by previous exploits of cross-chain bridges, which often rely on bypassing payment or verification logic.
Users interacting with multichain platforms may face risks to their digital asset holdings due to these underlying security flaws. Investors should exercise caution when utilizing bridges and monitor for official alerts from the affected networks.
The takeaway
Security researchers recommend that users verify the integrity of bridge protocols before moving large volumes of assets across different networks. Staying informed through real-time security alerts is a critical step in protecting decentralized finance holdings.
Further reading
For more information on digital security and asset protection, visit the Cybersecurity section.
Source note: This article includes information reported by TokenPost.
Live Poll
Do you trust the security of cross-chain bridges for managing your digital assets?
