Autheo THEO on Base: unbacked Hyperlane mint; firm size ~$1.7M, third-party sale figure lower
Update
PublicAML: 119M minted, ~$730K sold; Autheo has not confirmed
7 ETH (~$730K). 76M) figure. 5M unsold THEO sit in a separate Base wallet. Autheo has not confirmed these revised totals, published a post-mortem, or announced recovery. Mainnet remains halted.
76M) as the headline until the project reconciles.
12 Oct 2026 (firm alerts 13 Oct): PeckShield and Defimon report about 19 million THEO minted on Base without backing through Autheo's Hyperlane warp route, then sold. 76M) bridged to Ethereum; THEO fell about 92% in 24 hours.
Defimon classifies the path as a HypERC20 warp route secured by a TrustedRelayerIsm, meaning a single relayer key can authorize inbound interchain messages.
Autheo says it learned of unauthorized minting on 12 Oct, has not yet confirmed full scope, and as a precaution halted Autheo Mainnet block production, took validators offline, and stopped the affected cross-chain relayer.
It warns holders not to trade or bridge THEO until an official all-clear, and to ignore fake recovery sites. 76M firm figures. Research snapshot from PeckShield, Defimon, Autheo, and 0xCERT.
369 take
A trusted relayer is a hot key wearing a bridge costume. If one key can say mint, audits of the token contract alone are not enough. Autheo paused origin block production and killed the relayer.
Avoid THEO bridges and fake recovery links until Autheo clears the incident. Firm first-pass size and a later third-party sale reconstruction still disagree; wait for Autheo's own numbers.
Sources