CrossCurve bridge exploited for approximately $3 million across multiple chains via spoofed messages