LayerZero 公布 KelpDAO 安全事件报告:将调整安全策略并重建受影响云基础设施

深潮 TechFlow 消息,5 月 20 日,LayerZero Labs 发布 KelpDAO 攻击事件报告,确认基于其跨链通信协议构建的 KelpDAO rsETH 跨链桥遭攻击,约 116,500 枚 rsETH(约 2.92 亿美元)被盗。多家安全机构包括 Mandiant、CrowdStrike 及独立研究人员,将此次攻击归因于朝鲜相关黑客组织 TraderTraitor(UNC4899)。报告显示,攻击始于 2026 年 3 月 6 日,攻击者通过社会工程手段入侵 LayerZero 开发者账号,获取会话密钥并渗透 RPC 云环境,进一步污染内部 RPC 节点数据,并操控返回结果以欺骗监控系统及去中心化验证网络(DVN)。
LayerZero Labs 正式宣布将调整安全策略,包括不再允许自身 DVN 在单一验证配置中作为唯一签名方,同时重建受影响云基础设施,并引入短期凭证、即时权限升级及多方审批机制以强化安全。
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
Replies
Related Flash News
The Transit attacker has deposited 832.9 ETH, approximately $1.8 million, into Tornado.Cash
Bankless is rumored to be carrying out large-scale layoffs, and Lianchuang announces the end of its first era
The Mapo protocol suffered a cross-chain bridge attack and the token crashed
Mastercard acquires BVNK for $1.8 billion, Zerohash seeks high-valuation financing, JPMorgan points out ETH's structural lag
Bankless 创始人 David Hoffman 已清仓全部 ETH
The Map Protocol/Butter Network cross-chain bridge was attacked on Ethereum and BSC, resulting in losses of about $110,000
Matrixport-linked address 'ETH long position TOP 1': ETH long position floating loss at Matrixport-linked address narrowed
Another bridge attack: The attacker profited about 52 ETH through the vulnerability
Dragonfly Partner: Hyperliquid's order book model cannot solve RWA liquidity issues
K3 Capital withdrew 7,930 ETH from Binance, valued at $16.88 million


