CrossCurve warned it may pursue criminal and civil action after a flaw in its cross-chain bridge contracts was exploited, with security firms estimating losses around $3M across multiple networks. The protocol has identified wallet addresses tied to the exploit and set a 72-hour window for fund returns.