AUTHEO COMMUNITY UPDATE

AUTHEO COMMUNITY UPDATE

Security Remediation Progress and the Path Forward

October 30, 2026

Security Reminder: Until an official all-clear is issued, please do not buy, sell, or bridge THEO.

We want to share an update on Autheo's recovery work following the October 12 security incident.

Security Remediation Progress

As previously reported, the incident stemmed from a flaw in Autheo Mainnet's IBC asset validation, which allowed an unauthorized external asset to be converted into native THEO.

Our engineering and security teams have developed a fix that blocks the previously identified exploit pathway. The updated code adds safeguards to prevent unauthorized asset conversion and native-token issuance, require authorization for new cross-chain connections, and strengthen cross-chain security controls.

The fix is now undergoing internal testing. It will not be deployed to production until testing and further verification are complete.

Internal Testing and Independent Audit

Our internal review includes validating the corrective measures, examining alternative attack pathways, and reviewing the integrity of the proposed recovery procedures.

Once internal testing is complete, we intend to engage an independent third-party security auditor to review the fix. The results of these reviews will help determine the conditions for restoring Mainnet operations.

Our Team Remains Committed

Throughout this period, our global team has stayed focused on Autheo's long-term mission, working across security remediation, infrastructure, and ongoing platform development. Their commitment reflects the strength of the team behind Autheo and our determination to move forward responsibly.

Development Continues Beyond Recovery

While restoring network security remains our immediate priority, development across the broader Autheo ecosystem continues. Our teams are advancing the distributed mesh-network infrastructure, Autheo DevHub, and Autheo Marketplace, all important components of our longer-term vision for an integrated Internet Operating System. We will share more as these initiatives reach appropriate development and security milestones.

Next Steps

Our immediate priorities are to:

• Complete internal testing of the fix and any required remediation.
• Engage an independent third-party security auditor.
• Continue THEO supply reconciliation and recovery planning.
• Prepare for a controlled, security-led restoration of Mainnet and affected services.

Mainnet and affected cross-chain services remain suspended. No date has been announced for resuming network operations or official bridge services.

Moving Forward Together

The past few weeks have been very difficult, and they have also shown how committed our team is and how much the work ahead matters. We understand that confidence must be earned through results, transparency, and responsible execution.

Our focus is on completing the security work, working toward a safe, verified restoration of network operations, and continuing to build the technology that brought our community together.

Thank you to our validators, developers, token holders, and community members for your patience and continued support.

The Autheo Team

Security Reminder: Official updates will be posted only on the Autheo blog at autheo.com and Autheo's official social media accounts. Until an official all-clear is issued, please do not buy, sell, or bridge THEO. Do not repeat pending bridge transfers or respond to unofficial recovery offers. Never share your private keys or recovery phrases.