This crypto hack news centers on a partial refund tied to the Across Protocol exploit. On July 28, 2026, the attacker's labeled address sent 331.8 ETH, worth about $623.9K, back to the Across Protocol Hub Pool Owner Multisig, according to security firm PeckShield.

The Refund: What the On-Chain Data Shows
The screenshot shared by PeckShield lays out the transaction in full detail:
Detail | Value |
Amount | 331.83983785491676765 ETH (~$623,898.72) |
From | Across Protocol Exploiter 1 (labeled address) |
To | Across Protocol Hub Pool Owner Multisig |
Status | Success, 313 block confirmations |
Timestamp | July 28, 2026, 08:07:35 AM UTC |
Transaction Fee | 0.0000566021785561 ETH (~$0.11) |
This return covers a meaningful slice of the funds originally taken, though it falls well short of the full amount drained in the attack.
Across Protocol was attacked on Solana, with roughly $3.6 million worth of crypto drained. This followed an earlier incident on July 17, 2026, when Across first disclosed unusual activity on its Solana deployment at around 5:30 AM UTC.
The team disabled deposits as a containment step while the rest of the network kept running.
Across has posted several updates on the situation:
Containment: Deposits were paused within hours of detection; all in-flight bridge transactions for users were completed.
Restoration: Across confirmed Solana deposits were re-enabled, and the platform returned to full operation the same day.
User funds: The protocol has repeated that no user funds were lost, since only the relayer, operated by Risk Labs, absorbed the exposure.
Investigation: The trace is being coordinated with SEAL 911, the industry's emergency response network, and a full technical report is still pending. As exploits continue to affect EVM-compatible blockchains, security remains a key focus across the crypto ecosystem.
ACX buyout: The token buyout tied to Across's shift toward a US-based C-corp structure remains on track and unaffected.
ACX has held up relatively well through this crypto hack news cycle. Per CoinMarketCap data referenced in prior coverage, ACX traded near $0.04050, up over 3.3% in a 24-hour window, with volume climbing alongside the news rather than the sharp sell-off often seen after bridge exploits. That resilience may reflect the fact that user funds were never directly at risk.
The 331.8 ETH refund marks a positive development in this crypto hack news story, even as the bulk of the $3.6 million drained on Solana remains unrecovered. Across says a full postmortem covering the exact exploit mechanism is still coming, and the investigation with SEAL 911 continues.
This article is for educational and informational purposes only and should not be considered financial or investment advice. Always conduct your own research before making investment decisions.