Autheo's THEO token lost about 92 percent of its value in 24 hours after unauthorized tokens were minted on the Base network in what the project is treating as a suspected bridge exploit. The token collapsed from roughly $0.08 to about $0.006 within a day, wiping out nearly the entire market value of a project that had only listed on centralized exchanges weeks earlier. The incident is one of the sharpest single-day destructions of a token this year, and a brutal reminder of how bridge infrastructure remains crypto's most dangerous attack surface. For traders who value whether using crypto is safe, the contrast with opaque bridge trust assumptions could not be starker.

The mechanics, as reconstructed by blockchain researchers, point to the Hyperlane cross-chain bridge infrastructure. Crypto researcher Vlad reported that the attacker minted approximately 119 million THEO tokens — described as roughly 70 percent of the token's supply — out of thin air, then dumped them into available liquidity. PeckShield separately identified a transaction involving 19 million newly minted THEO tokens on Base, showing the tokens were exchanged for ETH before proceeds were bridged to Ethereum. Neither figure has been confirmed by Autheo, and the project has not confirmed that Hyperlane was the source of the vulnerability or explained how unauthorized minting became possible.

The dump was systematic. An orchestrator address pulled 9.5 million of the newly minted tokens and routed them through roughly 54 swaps across the THEO/USDC pool, Uniswap v4 positions and Hydrex pools on Base — Hydrex being the decentralized exchange where THEO first traded when it launched on August 20. Those sales extracted about $700,000 in wrapped Ether, USDC and Coinbase wrapped Bitcoin. Security analysts estimated the total loss at about $1.7 million, though the figure depends heavily on available liquidity rather than the nominal token count.

Autheo responded with an urgent security notice on October 12, telling users not to buy, sell or bridge THEO until an official all-clear, and warning holders about impersonators offering fake fund recovery. Centralized exchange MEXC suspended THEO deposits and withdrawals on October 13 at the team's request — THEO had only listed on MEXC on October 1. As of this week, Autheo has not released a technical postmortem or confirmed whether the relayer key was compromised, misconfigured or misused.

## Bridges remain the industry's weakest link

Cross-chain bridges have accounted for a disproportionate share of DeFi losses for years, and the THEO case fits the pattern: a trust assumption in message-passing infrastructure, exploited to mint unbacked tokens, then dumped into thin liquidity. Until bridges move to genuinely trust-minimized designs, every token bridged across chains carries this tail risk. Holders should treat bridge-dependent tokens with extra caution — and remember that even casino-grade fairness proofs only work when the underlying custody assumptions hold.