Autheo's THEO token lost 92% of its value following a suspected bridge exploit on the Base network. An attacker minted 19 million THEO tokens and sold them on Base, according to on-chain data. Autheo has told users to avoid buying, selling, or bridging the token while it investigates.
How the attack unfolded
The exploit targeted the bridge connecting THEO to Base. Bridges lock assets on one chain and issue representations on another; a flaw in that process let the attacker create 19 million new THEO out of thin air. Those tokens were then dumped on Base, and the price collapsed. The 92% drop happened fast, wiping out most of the token's value.
Autheo responded by urging users not to buy, sell, or bridge THEO. That's a standard move after a bridge breach — freezing activity can limit further damage, but it also leaves holders stuck. The team hasn't said whether it will attempt a snapshot, a rollback, or a reimbursement plan.
What Autheo has said — and what it hasn't
Public communication so far is limited to the warning. There's no confirmed timeline for when trading or bridging might resume, no word on whether the minted tokens have been burned or frozen, and no indication of whether the attacker's identity is known. The company also hasn't disclosed the total dollar value lost. Those gaps matter: without them, holders can't judge whether the token will be made whole or left to trade at a fraction of its former price.
Autheo's silence on next steps is not unusual in the first hours of a bridge exploit. Teams often wait for forensic reports before committing to a recovery plan, because any fix — a hard fork, a buyback, a new contract — carries its own risks and legal exposure.
Why Base bridges keep getting hit
Base has become a popular home for low-cost token launches, and bridges are a common target. They concentrate value and often rely on validators or multi-sig setups that can be tricked if a key is compromised or a contract has an overlooked flaw. The pattern here — mint a large supply, sell immediately — is one of the simplest and most damaging attacks a bridge can suffer.
For THEO holders, the immediate concern is whether the 19 million tokens are still in circulation. If they are, any price recovery will be capped by the attacker's ability to sell again. If they've been frozen, the damage is contained but the bridge remains closed until a fix is deployed.
What to watch
The next concrete signal will be any Autheo statement on the bridge's status. Until then, the token is effectively frozen by the company's own advisory. Users who follow that advice won't be able to exit — which is the point, but it also means the 92% loss is locked in for anyone who held through the drop. The attacker's wallets on Base are public, so on-chain analysts can track whether the 19 million tokens move again. That movement, or its absence, will tell the market more than any statement Autheo issues in the coming days.
