Time
03:46
GoPlus: x402 cross-chain protocol @402bridge suspected of being stolen, reminding users not to over-authorize
October 28, 2025
CoinFeed News
The GoPlus Chinese community has issued a security alert regarding a suspected theft of the x402 cross-chain protocol @402bridge. The creator of the contract starting with 0xed1A transferred the owner to the address 0x2b8F. The new owner then called the transferUserToken method within the contract to transfer all remaining USDC in authorized user wallets. Before minting, USDC must be authorized to the @402bridge contract. This resulted in over 200 users having their remaining USDC transferred due to excessive authorization. A total of 17,693 USDC was transferred from the 0x2b8F address, which was then converted to ETH and transferred to Arbitrum through multiple cross-chain transactions.