warp.green’s ERC-20 bridge was exploited through a vulnerability in the Chia-side bridge module, resulting in two malicious transactions totaling 93,000 USDC-denominated assets. The attacker subsequently converted the assets to ETH. warp.green said it verified that there were no additional malicious transactions and offered the attacker a 10% white-hat bounty in exchange for returning 90% of the funds within 48 hours

The ERC-20 bridge of warp.green (a cross-chain messaging protocol between Chia and EVM chains) suffered an exploit due to a vulnerability in the Chia-side Chialisp puzzle. The attacker minted worthless CAT tokens, presented them as burned wUSDC, obtained validator signatures, and drained ~$93,000 USDC from the Base and Ethereum bridge contracts, later converting the funds to ETH. The CAT bridge (securing assets like wXCH) appears unaffected.