Autheo has told users to avoid trading or bridging THEO while it investigates a recent incident tied to its bridge infrastructure. Public reporting says the earlier attack involved a trusted relayer key and resulted in the minting of unbacked THEO, with losses estimated at roughly $730K realized (about 291.7 ETH in sales), unconfirmed by Autheo; earlier ~$1.7M estimates included ETH already in the attacker wallet.
The underlying weakness fits a common blockchain security class: bridge or validator trust abuse. When a single privileged key can authorize minting or cross-chain settlement, compromise of that key can create assets that are not properly backed.
Defenders should reduce this risk with multi-signature controls, threshold signing, strict mint and transfer limits, on-chain supply checks, and rapid circuit breakers that halt bridge activity when balances diverge.
Projects should also rehearse incident response for bridge events, including key rotation, monitoring for abnormal minting, and immediate user-facing advisories. The fastest containment often comes from pausing the affected path before unbacked assets spread across liquidity pools.