On October 12, 2026, an attacker exploited a Hyperlane bridge setup on Base to mint 19 million unbacked Autheo THEO tokens without locking collateral on the origin chain.