GoKawiilAutheo's THEO token loses 92% after suspected bridge exploit despite three audits
Autheo's THEO token had been reviewed by Halborn, CertiK and Avelar Labs, but on October 13, 2026 a suspected bridge exploit allowed 19 million unauthorized tokens onto Base. THEO's price dropped from about $0.08 to around $0.006 within a day, and the attacker reportedly swapped the minted tokens for roughly 700.8 ETH, worth about $1.76 million, though that figure hasn't been confirmed on-chain. Autheo has told users to avoid buying, selling or bridging THEO while it investigates.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident suggests that passing multiple audits does not guarantee safety when the vulnerable component is bridge infrastructure spanning multiple chains, which falls outside the narrower scope auditors typically examine. Because the root cause remains unconfirmed, it's unclear whether the flaw originated in Autheo's specific deployment or in the shared Hyperlane bridging software, a distinction that could matter for other projects relying on the same infrastructure. This case may prompt closer scrutiny of how audits are scoped relative to cross-chain systems going forward.
- 19 million unauthorized THEO tokens appeared on Base despite three prior security audits.
- THEO's price fell 92%, from roughly $0.08 to $0.006, within 24 hours of the incident.
- The exploit likely involves Autheo's Hyperlane-based bridge, whose cross-chain nature often falls outside standard audit scope.
Source: techreport.com — Krishi Chowdhary, 2026-10-15
Published there as: “Audited three times, exploited anyway: what the THEO hack says about security audits”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.