Autheo's THEO Drops 92% After 19 Million Tokens Minted on Base

Autheo's THEO token lost about 92% of its value inside a day after tokens appeared on Base that nothing backed. PeckShield, the blockchain security firm, put it at 19 million THEO minted on the network and swapped for 700.8 ETH, worth roughly $1.76 million at the time, with the ether then bridged out to Ethereum. Autheo told holders on Monday evening to stop buying, selling and bridging the token while it investigated. It has confirmed no figure of its own. Four published accounts of how much was created and how much was taken do not agree, and the project has not said how the mint was possible.

Nineteen million, or a hundred and nineteen

The size of the mint is the first thing that does not reconcile. PeckShield's alert, posted Tuesday, has 19 million THEO, and Crypto Briefing, The Defiant and Crypto Times all carry that number. A researcher posting as Vlad put it at 119 million, which he called about 70% of supply; crypto.news carried that reading and no other outlet repeats it. It stands unverified. A third figure sits beside both. A trader posting as Zynex said 93.5 million THEO arrived in his wallet from the exploit, which is five times more than anyone claims was created.

"A hacker just sent 93.5M $THEO from the @Autheo_Network exploit to my wallet," Zynex wrote, adding that he had not moved or sold them.

crypto.news says plainly that it is unclear whether the 19 million and 119 million figures describe the same sequence. We could not establish which of the three counts supersedes the others.

Two loss totals, one set of transactions

The money figures spread too. Defimon Alerts, an automated monitoring feed run by the security firm Decurity, filed at 08:07 UTC on Tuesday with an estimate of about $1.7 million, and PeckShield's 700.8 ETH converts to roughly the same. Crypto Times, reading the same transactions, says the orchestrating address pulled 9.5 million tokens through about 54 swaps and got out with closer to $700,000 in wrapped ether, USDC and Coinbase's wrapped bitcoin. Some of that gap is the difference between tokens sold and value realized on thin order books. The rest is not explained on any of the four pages. Autheo has published no total at all.

A single relayer on the Base side

How the mint was reached is still a claim, not a finding. Autheo's bridge runs on Hyperlane Warp Routes, and Hyperlane is a permissionless interoperability protocol, which means any chain can plug in and accept messages passed across. Crypto Times reports that THEO's Base contract used a TrustedRelayerIsm, a security module that lets one relayer address execute arbitrary messages, and that the exploit message carried origin domain 2127, matching Autheo's own chain identifier. That account is alone in describing the mechanism. Crypto Briefing says the exact root cause has not been confirmed and names Halborn, CertiK and Avelar Labs among the project's auditors, while Crypto Times has Avelar Labs auditing the Base-to-mainnet bridge specifically. A forged message through a single-verifier bridge is a shape this beat knows well: Kelp DAO lost about $292 million to it in April, and a stolen bridge key produced 260 million unauthorized AGIX on Ethereum.

No postmortem, no timeline

MEXC, which listed THEO on 1 October, suspended deposits and withdrawals on Tuesday at Autheo's request, on Crypto Times' account alone. Autheo's own notice went up at 21:14 UTC on Monday with no recovery timeline, no compensation plan and no date for trading to resume, pointing holders to an email address. Its mainnet went live on 14 May. The token started trading at $0.05 on 20 August with about 5.3% of a 7 billion maximum supply in circulation, and Crypto Briefing puts it near $0.08 before the mint and about $0.006 after; both levels come from one page and are worth holding lightly. Selling landed on thin Base venues, the same conditions in which AFX lost $24.15 million across its cross-chain bridge in July. Until Autheo publishes a postmortem, the firmest number in the story is the one sitting in an ether wallet.