Aethir — OFTAdapter Ownership Takeover (BNB Bridge Drain to TRON)

Timeline: On April 9, 2026, an attacker called transferOwnership() on the AethirOFTAdapter contract on BSC. The function lacked any access control, allowing the attacker to become the contract owner and drain approximately 423,000 ATH tokens. 324K ATH were moved to an intermediary address, then to a bridging wallet, and bridged via Symbiosis Finance to two TRON wallets. Aethir disconnected compromised contracts and coordinated freezes with Binance, Upbit, Bithumb, and HTX. ZeroShadow assisted tracing. Main ATH supply on Ethereum was unaffected. Quick response by the Aethir team and exchanges limited actual user losses to under $90,000; Aethir pledged full user compensation.