Interoperability protocol Socket announced on Tuesday that it has temporarily halted the affected contracts after receiving reports of a vulnerability attack on its developed Bungee bridge aggregator, resulting in a theft of $3.3 million.
The project team stated at 15:15 Eastern Time on Tuesday, “Socket has experienced a security incident affecting wallets with unlimited authorization for Socket contracts. We have identified the issue and suspended the affected contracts.”
An anonymous researcher, Spreek, posted on the X platform at 14:19 Eastern Time, stating that Socket had “millions stolen” and pointing to the attacker's address, advising users to immediately revoke authorization for Socket. The attack seems to have ceased around 14:47 Eastern Time.