Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingEvercrest起诉LayerZero：指控其在1.16万枚rsETH被盗事件中背书单验证器配置
Evercrest指控LayerZero在发生导致116,500枚rsETH（价值约2.92亿美元）被盗的漏洞利用事件前，曾认可KelpDAO的单验证器桥接配置。该诉讼挑战了Pellegrino的公开言论，并指出此举扰乱了稳定币计划，同时导致超过6.5亿美元的用户资产被提取。
LayerZero将此次安全事故归咎于受入侵的RPC服务器，而Evercrest则对其关于独立桥接安全验证指导的说法提出异议。
诉讼核心争议：安全责任与误导行为
KelpDAO运营商Evercrest Technologies已对LayerZero及其联合创始人Bryan Pellegrino提起诉讼，起因是一起涉及116,500枚rsETH的漏洞利用事件。Evercrest指控LayerZero批准了桥接的安全配置，随后却公开指责KelpDAO依赖该安排导致了损失。
Evercrest于周四在不列颠哥伦比亚省最高法院提交了民事索赔，被告包括两家LayerZero公司及Pellegrino本人。该文件寻求因4月18日攻击事件导致的过失误述、疏忽及诽谤行为的损害赔偿。
对LayerZero桥接安全指导的质疑
According to the complaint, the stolen rsETH was worth approximately $292 million at the time of the exploit. Evercrest believes that when LayerZero explained the risks of relying on a single validator, it did not provide KelpDAO with sufficient risk warnings, but provided guarantees about the security settings of the bridge.
LayerZero allegedly told Evercrest in February 2024 that there were "no problems" with its default validator configuration. Evercrest accuses LayerZero of subsequently guiding it to adopt a single validator setup for another bridge in March 2024.
The decentralized verifier network (DVN) is responsible for checking cross-chain messages before bridging and releasing assets to users. According to the complaint, KelpDAO's affected bridges require only one DVN approval from LayerZero operations to perform operations.
Evercrest claims that LayerZero describes its DVN infrastructure as having monitoring, alerting, and multi-site redundancy. However, Evercrest alleges that LayerZero never warned that if a single DVN was compromised, the bridge risked exposure.
The complaint also states that LayerZero warned another developer, USDT0, about the risks of default DVN configurations. Evercrest believes that LayerZero should have provided KelpDAO with the same guidance before the attack occurred.
Challenging Pellegrino's public remarks
Evercrest also refuted LayerZero's public claim that the KelpDAO's configuration contradicts multiple DVN models it recommends. The company accused Pellegrino of accusing KelpDAO of choosing an arrangement that had been previously reviewed and approved by LayerZero.
这些言论构成了Evercrest诽谤索赔的一部分，而其他索赔则关乎LayerZero的安全指导。该文件寻求加重损害和惩罚性赔偿，以及针对所谓损失的补偿。
Evercrest表示，此次漏洞利用扰乱了KelpDAO的稳定币计划，导致其停用sbUSD产品。此外，根据诉状，KelpDAO已开始将rsETH迁移至另一种跨链安全标准。
另外，Evercrest声称自漏洞利用发生后，用户已从KelpDAO提取了超过6.5亿美元的资产。根据Pellegrino在X平台上的回应，他认为该诉讼毫无根据，并打算为自己辩护。
4月rsETH桥接漏洞利用事件始末
据报道，此次攻击涉及支持KelpDAO rsETH桥接的验证基础设施。LayerZero随后的事故报告描述了一名攻击者通过开发人员受感染的计算机访问其RPC环境的过程。
据LayerZero称，攻击者操纵了内部服务器的响应，并干扰了外部数据提供商。其DVN随后批准了一条伪造的消息，允许桥接在没有其他验证器批准的情况下释放rsETH。
LayerZero将损失规模部分归因于桥接对单一验证器的依赖。Evercrest对LayerZero此前的指导说法提出质疑，这一问题留待法院审理。
