FEG's SmartBridge was drained for ~$1.3M across Ethereum, BSC and Base. The attacker forged Wormhole messages from an unauthorized chain that the relayer accepted as withdrawal requests without verifying the emitter's authority, marking the third major FEG incident.