At approximately 12:05 UTC, 23rd Sept 2025, a developer’s private key was compromised, exploiting a previously audited bridge contract to mint and drain SFUND tokens across multiple chains.