KelpDAO exploit pushes $3B into Chainlink CCIP
The exploit is a KelpDAO incident, but the structural story is the $3B rotating to Chainlink's CCIP as DeFi projects dump LayerZero for cross-chain messaging.
Every Zipp story tagged #BridgeExploit, newest first.
The exploit is a KelpDAO incident, but the structural story is the $3B rotating to Chainlink's CCIP as DeFi projects dump LayerZero for cross-chain messaging.
The dollar loss was small, but the flaw class is the same one behind $340M in cross-chain bridge hacks already this year, and the root cause was a prover signing key left exposed on GitHub.
A flaw in Taiko bridge's source-signal proof validation is the likely root cause, per Blockaid. With block production frozen and a withdrawal advisory in place, every bridged dollar is now a…
The Layer-2's bridge proof mechanism was compromised, putting more than $1M already drained and every remaining bridged position at risk until Taiko confirms a fix.
Encrypted balances hid the shortfall for a week — the real cost is the absent monitoring layer and a $770K recovery window Axelar has declined to act on.
The Bridge is paused, the validation flaw is identified, and ~5B SYS in tainted outputs now sit on the UTXO chain — the structural question is whether exchanges can isolate the trail fast enough to…
The 75% refund under the Verus team's negotiated settlement avoids prosecution and an ongoing investigation — but the deal still costs the protocol roughly a fifth of what it lost, and it sets a…
Blockaid flags the cross-chain bridge as still actively draining, with Peckshield tallying the loss in tBTC, ETH, and USDC so far.
The breach lands on a small-cap altcoin bridge, but the laundering path through ETH is the same playbook used in higher-profile 2024–2025 cross-chain exploits — and it raises fresh questions about…
An ongoing attack on the Verus-Ethereum bridge has pulled roughly $11.58M out so far, with Blockaid's exploit detection catching the live drain rather than a post-mortem tally.
Contracts held, bridge didn't: WETH utilization hit 100% in 90 minutes, a seven-hour head start the Protocol Guardian's freeze couldn't recover.
The contracts held — the bridge didn't. Aave V3 lost $4B of usable liquidity in 29 hours, and WETH utilization hit 100% in under 90 minutes before the Protocol Guardian stepped in.