BlockThreat - Week 5, 2026
CrossCurve Bridge, Gyroscope Bridge, XPlayer, PGNLZ, Revert Finance, Holdstation, dYdX, USMS, Lick, Address Poisoning
About $10M was stolen this week across eight incidents. Two bridges were exploited in the same week using very similar attack vectors. The CrossCurve hack drew most of the attention with roughly $2.76M in losses and a wave of copycat attacks across nine different chains. The Gyroscope bridge hack, however, is even more concerning. The underlying vulnerability had the potential to enable far more devastating attacks, making it worth a closer look at the exact root cause and, more importantly, what not to do when designing cross chain messaging.