ATH bridge exploit contained after Aethir disables contracts: losses disputed between $90K and $400K

Aethir says it has contained an exploit targeting its ATH bridge contracts, with user losses totalling under $90,000 according to the company’s own assessment, significantly below blockchain security firm PeckShield’s initial estimate of $400,000.

The team disabled the affected contracts after detecting suspicious activity, preventing escalation to the primary ATH token supply on Ethereum. Binance, Upbit, Bithumb, and HTX blacklisted attacker-linked wallets within hours of the breach.

Swift Response Prevents Broader Damage

According to Aethir, the ATH bridge exploit was isolated to specific bridge contracts and did not impact the primary ATH token supply on Ethereum. This distinction proved critical in preventing wider contagion across the ecosystem.

“The main ATH supply on Ethereum remains intact,” the company stated, emphasizing that the ATH bridge exploit did not compromise core token reserves or trigger systemic risk.

Additionally, the ETH-ARB bridge facilitated through Squid remained unaffected, further limiting the scope of the ATH bridge exploit and ensuring that certain cross-chain routes continued operating normally.

The rapid containment underscores how crucial early detection has become in mitigating modern DeFi threats, particularly those involving bridges—historically one of the most vulnerable points in blockchain infrastructure.

Compensation and Investigation Underway

While the immediate threat has been neutralized, Aethir confirmed that it is preparing a compensation plan for affected users. The company said it will release detailed guidance in the coming week, outlining how victims of the ATH bridge exploit will be reimbursed.

At the same time, Aethir is working closely with law enforcement agencies and exchange partners to trace the attacker’s movements. The team has pledged to publish a full list of attacker-linked wallets via its community channels as it continues monitoring the stolen funds tied to the ATH bridge exploit.

“We are actively tracking the funds and will provide transparency around attacker addresses,” the company noted, adding that a comprehensive post-mortem will detail the root cause of the ATH bridge exploit, the number of affected users, and the steps taken to prevent future incidents.

Exchanges and Security Firms Step In

Aethir credited several major crypto exchanges for their rapid response in helping contain the ATH bridge exploit. Platforms including Binance, Upbit, Bithumb, and HTX quickly blacklisted wallets associated with the attacker.

This coordinated action played a key role in limiting the financial impact of the ATH bridge exploit, preventing further laundering or offloading of compromised funds.

Blockchain security firm PeckShield had initially flagged the suspicious activity, estimating losses at approximately $400,000 shortly after the breach was detected. However, Aethir’s latest assessment places total user losses significantly lower, at under $90,000.

The discrepancy highlights the challenges in tracking real-time losses during an active ATH bridge exploit, particularly when attackers move funds across multiple chains. PeckShield also noted that the attacker attempted to route funds from BNB Chain to Tron, using a series of intermediary wallets to obscure the trail.

Security partner ZeroShadow assisted Aethir during the incident response, providing analytical support that helped narrow the impact of the ATH bridge exploit.

Bridge Vulnerabilities Remain a Key Risk

The ATH bridge exploit adds to a growing list of cross-chain vulnerabilities that continue to challenge the crypto industry. Bridges, which enable interoperability between blockchains, have become prime targets for attackers due to their complexity and the large pools of locked assets they often manage.

Despite improvements in auditing and monitoring, incidents like the ATH bridge exploit demonstrate that even well-secured systems remain exposed to evolving attack vectors.

Broader Market Impact of Security Breaches

The timing of the ATH bridge exploit aligns with a broader surge in crypto-related security incidents. According to PeckShield, losses from approximately 20 separate exploits reached around $52 million in March alone—nearly double the figures recorded in February.

This trend suggests that the ATH bridge exploit is not an isolated case but part of a wider pattern affecting decentralized finance ecosystems.

In recent months, incidents involving platforms such as Venus Protocol and ResolvLabs have demonstrated how a single exploit can cascade across interconnected protocols. These events often result in liquidity shocks, bad debt accumulation, and broader market instability.

PeckShield also pointed to an increase in targeted attacks on individuals, including a multimillion-dollar theft linked to social engineering on Kraken, further underscoring the expanding threat landscape.

Containment Offers Temporary Relief

For now, Aethir’s ability to contain the ATH bridge exploit quickly has limited both financial losses and reputational damage. However, the incident reinforces ongoing concerns about the security of cross-chain infrastructure and the need for continued vigilance.

While user losses remain relatively low compared to other high-profile breaches, the ATH bridge exploit serves as a reminder that even smaller incidents can erode trust if not handled transparently and efficiently.

As Aethir prepares its full incident report and compensation framework, the industry will be watching closely not just for answers, but for lessons that could help prevent the next exploit.