{ "version": 1, "event_id": "evt_10b7788901349e2f", "url": "https://xiyu.news/events/evt_10b7788901349e2f/", "json": "https://xiyu.news/api/events/evt_10b7788901349e2f.json", "type": "security_incident", "status": "closed", "category": "policy", "title": { "zh": "近150亿美元资产正撤离LayerZero,如今一起2.92亿美元诉讼将其安全模型推上审判台", "en": "KelpDAO sues LayerZero and CEO over $292M rsETH bridge exploit - CoinDesk" }, "current_state": { "zh": "KelpDAO母公司Evercrest Technologies对LayerZero Labs及其CEO的诉讼仍在进行，LayerZero否认指控；约145亿美元资产已宣布从LayerZero迁移至Chainlink CCIP，案件正检验跨链安全责任划分。", "en": "Evercrest Technologies, KelpDAO's parent, is suing LayerZero Labs and its CEO, with LayerZero denying the claims; roughly $14.5B in assets have announced migrations from LayerZero to Chainlink CCIP, and the case is testing cross-chain security responsibility." }, "first_seen_at": "2026-09-25T09:43:54.636246+00:00", "last_updated_at": "2026-09-26T16:34:47.489495+00:00", "last_material_change_at": "2026-09-26T16:34:47.489495+00:00", "confidence": 0.75, "updates_count": 2, "sources_count": 2, "entities": [ "bridge-exploit", "ceo", "coindesk", "kelpdao", "lawsuit", "layerzero", "nearly", "rseth" ], "identifiers": [], "topics": [ "bridge-exploit", "cross-chain-security", "kelpdao", "lawsuit", "layerzero", "rseth", "rseth-exploit" ], "updates": [ { "update_id": "upd_4adca5d0f80eec60", "event_id": "evt_10b7788901349e2f", "occurred_at": "2026-09-25T08:58:03Z", "published_at": "2026-09-25T08:58:03Z", "first_seen_at": "2026-09-25T09:43:54.636246Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "KelpDAO就2.92亿美元rsETH跨链桥漏洞事件起诉LayerZero及其CEO - CoinDesk", "title_en": "KelpDAO sues LayerZero and CEO over $292M rsETH bridge exploit - CoinDesk", "what_changed_zh": "KelpDAO已就2.92亿美元rsETH跨链桥漏洞事件起诉LayerZero及其CEO，围绕跨链损失责任的争端进一步升级。", "what_changed_en": "KelpDAO has sued LayerZero and its CEO over the $292M rsETH bridge exploit, escalating the dispute over responsibility for the cross-chain losses.", "current_state_zh": "KelpDAO已就2.92亿美元rsETH跨链桥漏洞事件起诉LayerZero及其CEO，围绕跨链损失责任的争端进一步升级。", "current_state_en": "KelpDAO has sued LayerZero and its CEO over the $292M rsETH bridge exploit, escalating the dispute over responsibility for the cross-chain losses.", "detailed_summary_zh": "KelpDAO has sued LayerZero and its CEO over the $292M rsETH bridge exploit, escalating the dispute over responsibility for the cross-chain losses.", "detailed_summary_en": "KelpDAO has sued LayerZero and its CEO over the $292M rsETH bridge exploit, escalating the dispute over responsibility for the cross-chain losses.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.0, "references": [], "confidence": 0.75, "story_ids": [ "google_news:article:c6dcc4e3210342c7" ], "sources": [ { "url": "https://news.google.com/rss/articles/CBMisgFBVV95cUxNWU5sTlJsWnREZjRxTVg4Sk9nZElmZlU5WVU5SE1lbWNHeWI1bTdaejlXZEdzM25lMzlUQ1lzRlQ0LWVaRVE3UEt3emFSLUV1THFTbjNOVVZjWUlyZVdmWVZYN0drTnRZdk1Sd1Bwa2F4Nk9DZ2t6VS15NWlWLTRaVVhnUmliVmNVNEppY3I2QmQ0TEVTMjhpaGZtcl9lSWM3eEkwOHBDWFpoaXhfUlp2LVlB?oc=5", "label": "CoinDesk", "source_type": "google_news", "official": false } ] }, { "update_id": "upd_201f2c55557d7bd4", "event_id": "evt_10b7788901349e2f", "occurred_at": "2026-09-26T13:30:11Z", "published_at": "2026-09-26T13:30:11Z", "first_seen_at": "2026-09-26T16:34:47.489495Z", "time_precision": "published", "update_type": "aftermath", "material_change": true, "title_zh": "近150亿美元资产正撤离LayerZero,如今一起2.92亿美元诉讼将其安全模型推上审判台", "title_en": "Nearly $15B is moving off LayerZero, now a $292M lawsuit puts its security model on trial", "what_changed_zh": "新报道披露：原告为KelpDAO母公司Evercrest Technologies，在加拿大不列颠哥伦比亚省起诉LayerZero Labs及CEO Bryan Pellegrino，指控过失、虚假陈述和诽谤，并称攻击后Kelp用户已提取超6.5亿美元；约145亿美元资产宣布从LayerZero迁移至Chainlink CCIP；LayerZero CEO称诉讼无依据。", "what_changed_en": "New coverage discloses that plaintiff is Evercrest Technologies, KelpDAO's parent, suing LayerZero Labs and CEO Bryan Pellegrino in British Columbia on claims of negligence, misrepresentation and defamation; Kelp users have withdrawn over $650M since the attack; roughly $14.5B in assets have announced migrations from LayerZero to Chainlink CCIP; and LayerZero's CEO called the suit meritless.", "current_state_zh": "KelpDAO母公司Evercrest Technologies对LayerZero Labs及其CEO的诉讼仍在进行，LayerZero否认指控；约145亿美元资产已宣布从LayerZero迁移至Chainlink CCIP，案件正检验跨链安全责任划分。", "current_state_en": "Evercrest Technologies, KelpDAO's parent, is suing LayerZero Labs and its CEO, with LayerZero denying the claims; roughly $14.5B in assets have announced migrations from LayerZero to Chainlink CCIP, and the case is testing cross-chain security responsibility.", "detailed_summary_zh": "KelpDAO parent Evercrest Technologies sued LayerZero Labs and CEO Bryan Pellegrino in British Columbia over April's $292M rsETH exploit, alleging negligence, misrepresentation, and defamation, as roughly $14.5B in assets have announced migrations from LayerZero to Chainlink CCIP.", "detailed_summary_en": "KelpDAO parent Evercrest Technologies sued LayerZero Labs and CEO Bryan Pellegrino in British Columbia over April's $292M rsETH exploit, alleging negligence, misrepresentation, and defamation, as roughly $14.5B in assets have announced migrations from LayerZero to Chainlink CCIP.", "background_zh": "4 月 18 日,攻击者诱使 LayerZero 的验证器批准了一笔伪造的跨链转账;LayerZero 的事件报告将入侵源头追溯到一名开发者,其在 3 月被社交工程诱导克隆了一个恶意 GitHub 代码库。按照该报告的说法,攻击者进入 LayerZero 的 RPC 环境,污染了两个内部节点并使一家外部 RPC 提供商下线,导致验证器签署了一条基于虚假源链数据的消息,116,500 枚 rsETH 因此离开 Kelp 的跨链桥。此次攻破之所以得手,是因为 Kelp 的跨链桥仅要求 LayerZero 自家一个验证器批准;链上签名校验本身按设计正常运行,因为签名有效,只是所证明的信息是虚假的。", "background_en": "On April 18, attackers tricked LayerZero's verifier into approving a forged cross-chain transfer; LayerZero's incident report traces the intrusion to a developer who was socially engineered into cloning a malicious GitHub repository in March. According to that account, the attackers reached LayerZero's RPC environment, poisoned two internal nodes and knocked an external RPC provider offline, so the verifier signed a message built on false source-chain data and 116,500 rsETH left Kelp's bridge. The compromise succeeded because Kelp's bridge required approval from a single verifier — LayerZero's own — while the on-chain signature check worked as designed, since the signature was valid and simply attested to false information.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "这起争议的核心是跨链桥与互操作性安全,即基于 LayerZero 的应用和用户通过验证器配置、RPC 可靠性以及损失分担风险所面临的敞口。约 145 亿美元资产已宣布从 LayerZero 迁移至 Chainlink 的 CCIP(其中 BitGo 规模最大),表明部分持有者和协议正在转移其跨链流动性与托管假设的落点。", "market_impact_en": "The dispute centers on cross-chain bridge and interoperability security, the segment where LayerZero-based applications and users would face exposure through verifier configuration, RPC reliability and loss-allocation risk. Roughly $14.5 billion in announced migrations from LayerZero to Chainlink's CCIP — with BitGo the largest — signal that some holders and protocols are shifting where cross-chain liquidity and custody assumptions sit.", "importance_score": 7.5, "references": [ { "url": "https://news.bitcoin.com/cryptoquant-kelpdao-hack-contagion-triggers-worst-defi-liquidity-crunch-since-2024/", "title": "Cryptoquant: KelpDAO Hack 'Contagion' Triggers Worst DeFi Liquidity..." }, { "url": "https://www.kucoin.com/blog/kelpdao-hack-2026-rseth-exploit-analysis", "title": "What Is KelpDAO? How Its $292M Hack Shook the Crypto Market in..." }, { "url": "https://chain.link/cross-chain", "title": "Cross-Chain Interoperability Protocol (CCIP) | Chainlink" } ], "confidence": 0.92, "story_ids": [ "rss:cryptoslate.com_feed_:0dc64a06501468de" ], "sources": [ { "url": "https://cryptoslate.com/nearly-15-billion-is-moving-off-layerzero-now-a-292-million-lawsuit-puts-its-security-model-on-trial/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] } ] }