Autheo’s THEO token collapsed more than 90% after a suspected cross-chain bridge exploit that allowed unauthorized minting and rapid selling on Base. Blockchain security firm PeckShield reported that 19 million THEO were minted on Base and swapped for 700.8 ETH, worth roughly $1.76 million, before the proceeds were bridged to Ethereum. THEO fell about 92% in 24 hours, according to PeckShield.
Autheo confirmed it is investigating a security incident involving THEO and warned holders not to buy, sell, or bridge the token until an official all-clear. The project has not disclosed the full extent of the breach, the vulnerability involved, or total financial losses. Researchers tied the suspected exploit to a possible Hyperlane bridge vulnerability, with one account claiming the attacker minted approximately 119 million THEO, equivalent to around 70% of supply. Separately, PeckShield identified a 19 million THEO mint. Neither figure has been confirmed by Autheo.
In an unusual development, a wallet holder said he received 93.5 million THEO from the alleged attacker and offered to return the tokens. Autheo has not publicly provided a verified return address.
Meanwhile, hardware wallet maker Trezor said it is cutting its authorized reseller network effective January 1, 2027, as a preventive supply-chain measure. The announcement came after Ledger’s Donjon security team confirmed that wallets sold by Southeast Asian reseller CryptoBilis contained a hidden implant that could read recovery phrases from a device screen and transmit them over LTE. Ledger has not verified a figure of more than $86 million in suspected thefts cited by onchain investigator Specter. Affected resellers will receive no new stock but can sell existing inventory through the holiday season.
