Pinned post
AUTHEO COMMUNITY UPDATE | OCTOBER 30, 2026
We’re sharing an update on security remediation following the October 12 incident, including progress on the fix, internal verification, and the steps being considered before services can resume.
The incident involved a flaw in Autheo Mainnet’s IBC asset-validation mechanism that allowed an unauthorized external asset to be converted into native THEO.
The development and security teams have developed a fix targeting the identified exploit pathway.
The fix introduces additional safeguards against unauthorized asset conversion and native-token issuance, requires authorization for new cross-chain connections, and strengthens cross-chain security controls.
The code remains in internal testing. It will not be deployed to production until testing and further verification are complete.
Internal reviews are assessing the fix, alternative attack pathways, and recovery procedures.
After internal testing, Autheo intends to engage an independent third-party auditor. These reviews will help determine the conditions required before Mainnet and affected cross-chain services can be restored.
Mainnet and affected cross-chain services remain suspended. There is no restart date at this time.
Supply reconciliation and recovery planning are continuing. We will communicate further developments through official Autheo channels as verified information becomes available.
We’re sharing an update on security remediation following the October 12 incident, including progress on the fix, internal verification, and the steps being considered before services can resume.
The incident involved a flaw in Autheo Mainnet’s IBC asset-validation mechanism that allowed an unauthorized external asset to be converted into native THEO.
The development and security teams have developed a fix targeting the identified exploit pathway.
The fix introduces additional safeguards against unauthorized asset conversion and native-token issuance, requires authorization for new cross-chain connections, and strengthens cross-chain security controls.
The code remains in internal testing. It will not be deployed to production until testing and further verification are complete.
Internal reviews are assessing the fix, alternative attack pathways, and recovery procedures.
After internal testing, Autheo intends to engage an independent third-party auditor. These reviews will help determine the conditions required before Mainnet and affected cross-chain services can be restored.
Mainnet and affected cross-chain services remain suspended. There is no restart date at this time.
Supply reconciliation and recovery planning are continuing. We will communicate further developments through official Autheo channels as verified information becomes available.