CrossCurve, a cross-chain liquidity protocol, has confirmed a security breach resulting in the theft of approximately $3 million. The attack exploited a vulnerability in the protocol's smart contract, specifically a gateway verification bypass in the ReceiverAxelar contract. This allowed attackers to use forged cross-chain messages to trigger unauthorized token unlocking on the PortalV2 contract. The breach was discovered by blockchain security firm Defimon Alerts. CrossCurve, formerly known as EYWA, is backed by Curve Finance founder Michael Egorov and has previously raised $7 million.