Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

KelpDAO因2.92亿美元桥接漏洞事件对LayerZero提起诉讼

2026-09-26 00:43:22

Bookmark

KelpDAO sues LayerZero over $292 million bridging breach

TLDR: Retaking platform KelpDAO has filed legal proceedings against LayerZero and co-founder Bryan Pellegrino after a serious security breach occurred in April. The breach resulted in the theft of 116,500 rsETH tokens, valued at approximately US$292 million at the time of the incident. KelpDAO alleges that LayerZero concealed critical security vulnerabilities and had previously verified that the bridge was configured in a secure state. Pellegrino's CEO dismissed the legal claim as groundless and promised to fight it in Vancouver's judicial system. Following this incident, KelpDAO migrated its rsETH bridging infrastructure to Chainlink's Cross-Chain Interoperability Protocol (CCIP).

Retaking protocol KelpDAO has filed a lawsuit against interoperability platform LayerZero and co-founder Bryan Pellegrino over a major security breach that stole hundreds of millions of dollars in cryptocurrency from its rsETH Bridge during the spring.

Breaking News: KelpDAO sues LayerZero and its CEO over a $292 million rsETH bridging vulnerability.

KelpDAO alleges that undisclosed risks and a "1-of-1" verifier setting allowed hackers associated with North Korean hackers to drain 116,500 rsETH. The core of the controversy is whether LayerZero endorsed... pic.twitter.com/lKr2HOVllK-Coin Bureau (@coinbureau) September 25, 2026

本周，民事诉讼已向加拿大不列颠哥伦比亚省的法院提交，将LayerZero协议及Pellegrino列为被告。根据KelpDAO的指控，安全妥协的发生是由于LayerZero未能揭示其基础设施中的关键漏洞。该协议进一步声称，LayerZero未能实施足以防止攻击者渗透其系统的充分保障措施。

安全漏洞详情

4月22日，恶意行为者利用了基于LayerZero底层技术的KelpDAO跨链基础设施。当时，该桥接控制了流通中几乎所有重新质押以太币的近百分之二十。https://t.co/D17UbUbixh— Kelp (@KelpDAO) 2026年9月25日

作案者从平台中提取了116,500枚rsETH代币。被盗数字资产在漏洞发生时的市场价值约为2.92亿美元。情报报告将此次袭击归咎于来自朝鲜的黑客集体。根据对此前事件的报道，大部分被盗加密货币随后通过各种渠道被洗钱。

影响远不止于KelpDAO本身。安全漏洞引发了稳定币生态系统中的广泛恐慌。运营去中心化金融领域最大借贷协议的Aave被迫筹集3亿美元紧急资金。这笔资本注入是为了满足担忧用户的大规模提款请求。在漏洞发生不到一周的时间内，去中心化金融平台的总锁定价值合计蒸发达200亿美元。

关于责任归属的相互矛盾的说法

安全事件发生后，LayerZero发布了一份全面的事故后分析报告。该协议解释称，攻击者成功渗透了其内部节点基础设施，欺骗其验证机制以认证欺诈性的跨链通信。

LayerZero强调，KelpDAO的桥接架构完全依赖于单一的LayerZero验证器网络进行交易验证。该系统缺乏第二层独立的验证层来交叉检查交易的真实性。这种单一的批准机制使得伪造消息通过了验证，从而触发了未经授权的资金释放。LayerZero表示，它此前曾提倡多验证器配置，并且已停止作为合作伙伴协议的唯一必需验证器提供服务。

KelpDAO对这一事件描述提出挑战。在5月的声明中，该协议坚持认为，其验证架构已与LayerZero代表进行了彻底讨论，并事先获得了明确的安全批准。KelpDAO辩称，LayerZero未能就所批准配置的固有风险提供充分的警告。

正式诉讼明确指出，安全妥协“是LayerZero失败的直接结果”。KelpDAO还指控LayerZero在攻击之前对其桥接架构进行了审查，并提供了书面背书。

Pellegrino通过社交媒体渠道迅速予以反驳。他承认在不列颠哥伦比亚省提交的民事投诉，该投诉同时针对他个人和LayerZero实体。他将这些指控形容为毫无根据，并宣布打算在温哥华的法律场所进行 vigorous（强有力的）辩护。Cointelegraph联系LayerZero代表寻求官方评论，但在发稿时尚未获得回应。

在漏洞发生后，KelpDAO报告实施了加强安全措施以保护存款人资产。该协议已将其rsETH桥接操作迁移至Chainlink的跨链互操作性协议基础设施。KelpDAO表示，建立准确的公众叙事是提起诉讼的动机之一，此外还包括追究LayerZero和Pellegrino对财务损失的责任。争议现在将通过加拿大司法渠道进行，双方将就今年最重大的去中心化金融损失之一的责任问题展开辩论。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article

0.00% 0.00%

Bullish

Bearish

Hot Coins