Skip to content

Topic

Cross-Chain Bridge Security

The practices and mechanisms—validator signature thresholds, deposit/withdrawal logic, and set remediation—that protect assets moved between blockchains.

Current stories

investOne report1 publisher

Crypto lending's rebound to $56 billion enlarges the pool exposed to the next Kelp DAO-style exploit

Crypto lending value locked has risen more than 55% since early July to about $56 billion, according to DeFiLlama data. Aave and Spark have pruned collateral to cap bridge and oracle exposure, though Aave's founder says no protocol can control the wider ecosystem.

Reality

Evidence45
Adoption60
Hype gap+15
Incentives70
Confidence45
investConfirmed7 publishers

Blockstream bets forensic tracing beats paying a $32m bounty for the last 598.5 BTC

The attackers who drained 4,000 BTC from Liquid handed back 3,400 after the patch and kept 598.5. Blockstream puts about $47 million on that hold and says it will trace the coins instead of paying.

Perspective Coverage

7 publishers
Builder
Builder 24%
Operator
Operator 43%
Investor
Investor 33%

Reality

Evidence72
Adoption
Not scored
Hype gap+10
Incentives62
Confidence68
investConfirmed5 publishers

Attacker drains $3.8 million from Near Intents via bug in Omni deposit and withdrawal layer

Near Intents halted its cross-chain swap service after a bug in its Omni deposit layer let an attacker take about $3.8 million. Crypto balances carry no deposit insurance, so affected users are relying on the operator's promise to repay them in full.

Perspective Coverage

5 publishers
Builder
Builder 23%
Operator
Operator 44%
Investor
Investor 33%

Reality

Evidence70
Adoption55
Hype gap+15
Incentives60
Confidence65
investConfirmed4 publishers

KelpDAO's developer sues LayerZero over the lone-verifier setup behind the $292 million rsETH exploit

Evercrest, the company behind KelpDAO, is suing LayerZero and CEO Bryan Pellegrino in British Columbia over the $292 million rsETH bridge exploit. Its negligence case rests on written 2024 assurances about a single verifier and on a risk warning it says LayerZero gave another customer.

Perspective Coverage

4 publishers
Builder
Builder 40%
Operator
Operator 32%
Investor
Investor 28%

Reality

Evidence55
Adoption40
Hype gap+15
Incentives70
Confidence60
investOne report1 publisher

BSC gives node operators until 02:30 UTC on August 25 to be running v1.7.7

Pasteur bundles a bridge signature-counting fix, a retired-key cleanup, and a pre-executed-block change that took testnet throughput from 1,237 to 2,324 TPS.

Reality

Evidence58
Adoption38
Hype gap+12
Incentives62
Confidence55