Autheo / THEO Hyperlane TrustedRelayerIsm unbacked mint (2026-10-12) — seller/attacker wallets
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Autheo ($THEO) incident on 2026-10-12: unbacked cross-chain mint via Hyperlane warp routes secured only by TrustedRelayerIsm (single relayer EOA, no validator signatures). BlockWatchdog reports three mints totaling 219M THEO across Base and Robinhood Chain, all initially to the seller wallet; ~28.05M sold for about 298.94 ETH (~$752K) of proceeds (PeckShield's widely repeated 700.8 ETH / ~$1.76M figure is the seller's post-bridge Ethereum balance including pre-existing ETH, not THEO sale proceeds). Autheo publicly acknowledged unauthorized minting and halted mainnet/relayer. Sources:…
Other addresses in this report: 0x3048b4ee5a070f33b73e3401829847255079e0ad