Autheo's THEO Falls 92% After Suspected Bridge Exploit on Base

Autheo's THEO token lost 92% of its value in 24 hours after 19 million THEO were minted on Base and sold, according to blockchain security firm PeckShield. The firm said the tokens were swapped for 700.8 ETH, worth about $1.76 million, and the ETH was then bridged from Base to Ethereum mainnet.

For anyone holding THEO, the project's own instruction matters most right now. Autheo's security notice told users not to touch the token at all while the team investigates:

"The Autheo team is investigating a security incident involving THEO. Our development team is actively looking into the issue. Until an official all-clear is issued: Do not buy, sell, or bridge THEO."

That leaves holders with a token that is down 92% and a request from the issuer not to move it.

How 19 Million New THEO Reached the Market

PeckShield described a short chain of events. New THEO were created on Base, those tokens were swapped for ETH, and the ETH was moved off Base to Ethereum.

The 92% fall over 24 hours came as those tokens were sold. Every newly created token sold into the market is supply that existing holders were not counting on. In this case, the sale turned 19 million of them into ETH that has already left the chain where the tokens were sold.

Autheo has called it a "security incident." It has not used the word exploit, and it has not said who created the tokens.

What Autheo Has Not Confirmed

The numbers in this story come from PeckShield, not from Autheo. The project has not confirmed how many tokens were minted or how much was lost.

Several basic questions are still open:

• Autheo has not published a technical postmortem.
• It has not identified the vulnerability or explained how the unauthorized minting became possible.
• It has not disclosed the full extent of the breach.
• It has not given its own estimate of financial losses.

Until Autheo answers those, holders cannot tell whether the 19 million figure is the whole of the damage or only the part PeckShield traced.

The next two things to watch are the postmortem, which should say what failed, and the all-clear, which is the point at which Autheo says THEO can be traded and bridged again.