diff --git a/shadowsocks/tcprelay.py b/shadowsocks/tcprelay.py
index cc49d67..075a50b 100644
--- a/shadowsocks/tcprelay.py
+++ b/shadowsocks/tcprelay.py
@@ -339,6 +339,7 @@ class TCPRelayHandler(object):
                     if onetimeauth_verify(_hash, _data, key) is False:
                         logging.warn('one time auth fail')
                         self.destroy()
+                        return
                     header_length += ONETIMEAUTH_BYTES
             self._remote_address = (common.to_str(remote_addr), remote_port)
             # pause reading