Autheo's THEO token lost more than 90% of its value after a $1.7 million exploit drained the project's Hyperlane Bridge deployment on Coinbase's Base network, The Crypto Times reported.

The exploit hit a Hyperlane-based bridge contract used to route THEO across chains. The attacker pulled roughly $1.7 million from the contract's liquidity, according to the publication.

What did the exploit target?

The Crypto Times pegged the loss at approximately $1.7 million and did not specify the technical root cause. Bridge exploits typically arise from flaws in verification logic, signature handling, or liquidity-pool accounting.

Hyperlane lets each chain's deployment be configured independently. That architecture means a vulnerability can sit in a project's own setup rather than in the core protocol code shared across all deployments.

What is Autheo?

Autheo is the issuer of THEO, the project's native token. The team had marketed its Hyperlane integration as the way to make THEO available across multiple chains without operating a custom bridge from scratch.

Base is the layer-2 rollup operated by Coinbase and launched publicly in August 2023. It has grown into one of the largest Ethereum scaling networks by total value locked through 2024 and 2025 as Ethereum mainnet fees remained a barrier for retail users. The chain's growth has come with a higher frequency of exploits as more value migrates onto the network.

How did the token react?

THEO fell more than 90% within hours of the exploit being disclosed. The price collapse reflected the market's repricing of the asset once the backing liquidity on the bridge was effectively gone.

Liquidity providers withdrew positions rapidly. That pattern has followed every major bridge exploit that wiped out the assets supporting a wrapped or bridged token on the destination chain.

How does the $1.7M loss compare?

Bridge exploits have produced some of the largest dollar-value losses in crypto history. Wormhole lost $320 million in February 2022, Ronin lost $625 million in March 2022, and Multichain lost $126 million in July 2023.

The Autheo incident sits well below those by absolute dollar terms but produced a token-price drop that exceeded the proportional impact of those larger events. Each of those larger exploits was followed by partial or full reimbursement plans funded by the affected projects or their backers.

What happens next?

The Autheo team has not published a full technical post-mortem or a reimbursement plan, The Crypto Times reported. The publication noted limited official communication in the immediate aftermath of the exploit.

Any restart of cross-chain THEO transfers would require either redeployment of the bridge contract or a treasury-funded compensation plan. Both paths would likely require a fresh third-party audit before the contract could resume handling user funds.

The market will watch for an official statement from Autheo and any on-chain movement of the stolen $1.7 million, which remains traceable on Base's public ledger. Bridge exploits of this size typically trigger a window of 24 to 72 hours for negotiation or white-hat recovery before the funds are mixed through cross-chain services, leaving a narrow window for any coordinated response.