News linked to both this project and an event.
LayerZero announced it will gradually cease off-chain support for 20 low-activity blockchains, and DVN and Executor services for relevant networks will be taken offline sequentially. The official team reminds users holding relevant Stargate assets to complete cross-chain migration before the deadline.
LayerZero has announced a partnership with Keeta to support the transfer of tokenized commercial bank deposits across public chains including Keeta Network, Ethereum, Solana, and Base, aiming to provide institutional cross-chain settlement infrastructure.According to the announcement, the two parties will combine LayerZero's omnichain interoperability protocol with Keeta's compliance infrastructure to support institutions in fund management and payment operations. The newly introduced Keeta Stablecoins are backed by commercial bank deposits custodied by Bivo, a licensed fintech platform in the United States. Unlike traditional stablecoins, they correspond to real commercial bank deposits and allow the issuer to maintain control over the contract through LayerZero's Omnichain Fungible Token (OFT) standard.Keeta Stablecoins will launch later this month, initially supporting the US dollar, with future expansions to include the Euro, Japanese Yen, Chinese Yuan, British Pound, Canadian Dollar, Mexican Peso, UAE Dirham, Hong Kong Dollar, and other fiat currencies. (The Block)
the cross-chain protocol Allbridge has issued an official statement confirming that an attacker has withdrawn approximately $1.65 million in assets from the Allbridge Core liquidity pool. A detailed analysis of the incident is currently being compiled, and the full investigation results will be published subsequently. The team emphasizes that there is no further risk to current user liquidity and that the Allbridge Next service is operating normally.In response to this incident, Allbridge plans to relaunch the Core version but will remove the liquidity pool design. Future cross-chain transfers will be facilitated via Circle CCTP and the LayerZero router to eliminate the risk of liquidity pool imbalance and the model vulnerabilities exploited in this attack. This incident has accelerated the previously initiated migration plan to fully transition to the more secure new infrastructure, Allbridge Next. According to the plan, Allbridge Core and Allbridge Classic will cease operations in their current form within the next three months, and users are advised to withdraw their relevant liquidity in advance.It is understood that this attack has exposed the risks inherent in the traditional cross-chain liquidity pool model and has further driven the protocol's transition towards a cross-chain architecture based on message passing and native asset transfer.
Gate DEX has announced its full integration with Robinhood Chain, becoming one of the first mainstream exchange on-chain gateways to support this ecosystem, further expanding the platform's multi-chain ecosystem layout and Web3 infrastructure capabilities. This integration covers core scenarios such as asset discovery, wallet management, on-chain trading, cross-chain swaps, market tracking, and DApp interaction, providing users with a more complete and efficient on-chain experience.With this upgrade, Gate Main Site Alpha has added support for the display and trading of Robinhood Chain ecosystem assets, and has integrated with ecosystem launch platforms such as Noxa.fun and Bankr; Gate Wallet supports Robinhood Chain asset management and DApp interaction; Gate DEX Swap supports single-chain and cross-chain swaps on Robinhood Chain, and achieves asset interoperability with mainstream public chains such as BSC, Ethereum, and Base via Across and LayerZero, further improving the efficiency of multi-chain asset flow.As emerging public chain ecosystems like Robinhood Chain develop rapidly, Gate DEX continues to enhance its one-stop on-chain service capabilities covering asset discovery, trading, cross-chain connectivity, and ecosystem applications. Looking ahead, Gate will continue to deepen its multi-chain ecosystem development, connect with more high-quality public chains and innovative applications, continuously improve its Web3 product capabilities, and create a more open, efficient, and convenient on-chain experience for global users.
: On July 13, crypto KOL @amathxbt and others revealed that Circle’s public chain Arc may have been launched non-publicly. Cross-chain protocols LayerZero and LI.FI have been deployed on the Arc network, but community testing has not yet been publicly opened. Arc is a public Layer 1 blockchain, positioned as the "economic operating system of the internet," providing shared and composable infrastructure to support economic contracts, stablecoins, tokenized assets, and global market operations. In May this year, Circle officially released the ARC whitepaper, outlining the design framework of ARC as the native coordination asset of the Arc blockchain network. The Arc public testnet launched in October 2025, with the mainnet expected to go live in the summer of 2026.
Odaily Bankr announced on X that its token, BNKR, has officially launched on Robinhood Chain. It now supports cross-chain interoperability between Base and Robinhood Chain via LayerZero OFT. Additionally, the entire cross-chain deployment process was autonomously executed by Bankr Agent, which also created a $50,000 BNKR/WETH liquidity pool on Robinhood Chain.
According to official information, Mantle announced today that its native cross-chain infrastructure Mantle Super Portal, jointly developed with Bybit, has migrated from LayerZero to Chainlink CCIP. Powered by CCIP, Mantle Super Portal will feature enhanced cross-chain security, decentralized node infrastructure protection, advanced risk management, and institutional-grade security standards, providing a higher level of security for cross-chain transfers of MNT tokens valued at over $2.5 billion. Furthermore, as an increasing number of regulated assets such as tokenized stocks are transferred on-chain, the underlying infrastructure supporting them must also meet traditional finance standards. This migration will further solidify Mantle's position as a "distribution layer connecting traditional finance and on-chain liquidity," and also reflects Mantle and Bybit's continued commitment to developing MNT through further integrations, opportunities, and use cases. According to the details provided, Mantle Super Portal will be temporarily closed during the migration, scheduled from July 9 to 15, 2026 (the actual timeframe may be slightly extended). No action is required from users, and transfers will automatically resume upon completion of the migration.
According to CoinDesk, researchers at blockchain security company Hexens discovered an "expired cache" type confusion vulnerability in the Aptos blockchain Move virtual machine. Attackers require only about $3,000 in server costs to launch attacks in a simulated environment with a success rate of nearly 90%, without needing validator privileges or internal knowledge. Researchers ran approximately 20 attacks in simulated tests, succeeding 17-18 times, and verified the potential ability to control management permissions of cross-chain protocols such as LayerZero, Wormhole, and USDC CCTP. Hexens assessed that the vulnerability directly threatens protocols on the Aptos chain such as DeFi, stablecoins, and liquid staking, involving assets in the low single-digit billions of dollars; if spread through paths such as cross-chain bridges, stablecoin minting, and centralized exchanges, the systemic risk exposure could reach up to $70 billion. The Aptos team completed the fix and deployed it to the mainnet within hours after receiving the vulnerability report on February 25, and currently no user funds have been compromised.
According to on-chain analyst Ember (@EmberCN), a team or investor address that received token allocations during ZRO’s launch two years ago transferred 3.51 million unlocked ZRO tokens to Binance within the past day, valued at approximately $3.96 million.
Aave has published a post-mortem of the April 18 rsETH incident, stating that the rsETH LayerZero V2 cross-chain bridge of liquid staking protocol Kelp accepted a forged message during a cross-chain transfer from Unichain to Ethereum. This caused the adapter on the Ethereum side to release 116,500 rsETH without a corresponding burn on the Unichain side. Aave stated that the attack occurred on a third-party cross-chain bridge infrastructure. However, the attacker deposited the stolen rsETH into 8 Aave V3 positions, borrowing 82,650 WETH and 821 wstETH, which impacted the Aave market.Aave stated that the attacker's rsETH on Arbitrum has now been burned. The LayerZero OFT adapter has replenished 116,131.72 rsETH in 5 batches, and the asset backing for rsETH has been fully restored. The affected WETH and rsETH markets have returned to normal.
Robinhood has listed AERO, QNT, and ZRO.
LayerZero Labs has released a recent incident report stating that on April 18, 2026, the KelpDAO rsETH cross-chain bridge, built on its cross-chain communication protocol, suffered an attack resulting in the theft of approximately 116,500 rsETH (around $292 million). Multiple security organizations, including Mandiant, CrowdStrike, and independent researchers, have attributed this attack to the North Korea-linked hacker group TraderTraitor (UNC4899).According to the report, the attack began on March 6, 2026. The attackers compromised a LayerZero developer account through social engineering, obtained session keys, and penetrated the RPC cloud environment. They further contaminated internal RPC node data and manipulated the returned results to deceive monitoring systems and the Decentralized Verification Network (DVN). Subsequently, the attackers launched a denial-of-service attack against external RPC providers, forcing the verification system to rely on the compromised nodes to generate forged cross-chain proofs, thereby successfully extracting the funds.LayerZero pointed out that the core vulnerability of this incident lay in the affected application adopting a "single-verifier" configuration. This allowed the target contract to execute asset releases upon receiving only a single valid signature, leading to the theft of rsETH.Following the incident, LayerZero Labs announced an adjustment to security policies. This includes no longer allowing its own DVN to act as the sole signer in a single-verifier configuration, rebuilding the affected cloud infrastructure, and introducing short-term credentials, instant permission upgrades, and multi-party approval mechanisms to enhance security. Additionally, zeroShadow and law enforcement agencies have initiated investigations and asset tracing. LayerZero stated it will continue to collaborate with ecosystem partners to strengthen the cross-chain security framework to address increasingly sophisticated nation-state attack threats.
Aave announced that the first batch of rsETH has been transferred to LayerZero’s OFT adapter, and cross-chain transfers of rsETH between the Ethereum mainnet and various L2 networks have now resumed. This development means that the rsETH cross-chain channels previously affected have been restored, covering operations across the Ethereum mainnet and L2 networks.
following the Kelp security incident, Tether's asset interoperability protocol USDT0 has disclosed details of its protocol security architecture. It stated that the system currently utilizes a proprietary DVN (Decentralized Verification Network) with message veto authority, and requires 3 independent validators, operating on different codebases, to reach a 3/3 consensus before cross-chain messages can be settled. The current verification nodes include the USDT0 proprietary DVN, LayerZero, and Canary, with future plans to expand to 4/4 and 5/5 verification mechanisms.USDT0 also stated that all multi-signature transactions must undergo multiple reviews by internal teams, external security teams, and auditing firms before signatures are submitted. The relevant contracts have been audited by firms such as Guardian and OpenZeppelin, and a $6 million bug bounty program has been launched on Immunefi.
LayerZero Labs posted on platform X, stating that the internal RPC used by LayerZero Labs had been attacked by the Lazarus Group over the past three weeks, compromising the true source of its DVN (Decentralized Verifier Network). Meanwhile, external RPC providers experienced DDoS attacks. The incident affected 0.14% of applications and approximately 0.36% of asset value. LayerZero Labs stated that assets are currently secure, and over $9 billion in funds have been bridged through the protocol since April 19.In response to the security risk, LayerZero Labs has ceased providing services for its DVN in a 1/1 configuration. Default configurations for all pathways will migrate to a multi-DVN model of at least 3/3 or 5/5 signatures. Additionally, regarding an incident from three years ago where a multi-sig holder mistakenly used a hardware wallet for personal transactions, LayerZero Labs has removed that signer and replaced the wallet, while developing a custom OneSig multi-sig system. LayerZero Labs advises developers to lock configurations to avoid reliance on default settings and plans to launch an asset management platform, Console, to enhance security monitoring.
According to The Block, the Arbitrum DAO voted to release 30,765.6 ETH (approximately $70 million), previously frozen, to support the DeFi United initiative—aimed at offsetting Kelp DAO’s $292 million exploit loss last month. The vote passed with 90.96% support (182.2 million votes). The attack was allegedly carried out by the North Korean Lazarus hacking group, which exploited a vulnerability in LayerZero’s OFT cross-chain bridge—a single-validator configuration—which allowed attackers to steal 116,500 rsETH and pledge most of the stolen assets as collateral on Aave, resulting in roughly $190 million in bad debt. DeFi United has secured contributions from multiple parties, including 30,000 ETH from Consensys and Joseph Lubin, a 30,000-ETH loan from Mantle, and 5,000 ETH from LayerZero.
Solv Protocol has announced the migration of over $700 million in tokenized Bitcoin assets to Chainlink's cross-chain protocol CCIP, and will gradually phase out LayerZero's bridging support across multiple chains. The migration involves core assets such as SolvBTC and xSolvBTC. Solv stated that the decision is based on the latest security reviews and recent cross-chain security incidents, and CCIP will become its standard cross-chain infrastructure. This move follows Kelp DAO's migration of approximately $290 million in assets to Chainlink, further strengthening the trend of "cross-chain infrastructure shifting toward security-first migration." (CoinDesk)
LayerZero Labs co-founder and CEO Bryan Pellegrino has responded to the KelpDAO-related controversy on the X platform, stating that most of the recent accusations surrounding KelpDAO are "completely untrue." He noted that Kelp initially adopted the default MultiDVN or DeadDVN configuration, but on-chain records show it was manually changed to a 1/1 configuration on April 1, 2024. The official documentation has repeatedly recommended using a 2/3 configuration for production environments.Bryan Pellegrino stated that the DeadDVN mechanism would reject transaction paths that have not been properly configured with DVN, preventing applications from running directly with default parameters. He also mentioned that the LayerZero team had previously provided clear configuration recommendations to KelpDAO. At the same time, he revealed that a comprehensive analysis report will be released after confirmation is completed by an external security firm.
According to monitoring by on-chain analyst Specter, the Wasabi Protocol attacker has deposited all stolen funds into Tornado Cash, moving approximately $5.9 million into Tornado Cash. Additionally, North Korean hacking groups have also used Tornado Cash to launder stolen funds from KelpDAO and LayerZero. Their process involved first cross-chaining the assets to Bitcoin, then routing them through Wasabi Mixer, extracting and cross-chaining back to Ethereum, depositing into Tornado Cash, subsequently withdrawing to new wallets and dispersing across multiple addresses. The new wallets then deployed tokens, used the stolen funds to buy in, removed liquidity from the deployment wallet, cross-chained to Tron (USDT), held for several hours or days, and finally sent to OTC-related wallets.
According to official announcements, Aave Labs, KelpDAO, LayerZero, EtherFi, Compound, and others have submitted an Arbitrum Constitutional AIP proposing the release of 30,765.67 ETH—previously frozen by the Arbitrum Security Council—to the recovery address 0xf228...C15e for compensation and restoration of assets related to the rsETH incident. The proposal states that the KelpDAO rsETH cross-chain incident created a support shortfall of approximately 76,127 rsETH, and the released funds will be incorporated into the coordinated recovery process. The proposal requires no additional treasury funding and estimates the governance process will take approximately 49 days. Currently, the proposal has a 100% voting approval rate, and voting will end at 2:54 AM Beijing Time on May 8.