Cardano founder Charles Hoskinson used his newest livestream to argue that the roughly $292 million KelpDAO exploit was not simply one other bridge failure, however a broader warning about how Ethereum’s restaking, cross-chain messaging, and lending stack can flip a single compromise into system-wide contagion.
In Hoskinson’s telling, the April 18 assault uncovered what he sees as probably the most fragile a part of trendy DeFi: not essentially application-level good contracts, however the verification layers and interdependencies that sit between protocols. He stated the exploit, which concerned about 116,500 rsETH drained from KelpDAO’s Ethereum escrow, ought to power a wider business dialog about bridge belief assumptions, verifier design, and the velocity at which dangerous collateral can unfold by way of lending markets.
Cardano Founder Warns Of Harmful Flaw At The Coronary heart Of Ethereum DeFi
Relatively than ship an ordinary postmortem, Hoskinson stated he took inner incident-report materials and used AI to show it into a web site that walked viewers by way of the mechanics of the exploit. That construction framed his bigger level: the failure, as he described it, didn’t start with damaged contract math inside KelpDAO itself, nor with an apparent accounting flaw at LayerZero. As an alternative, he stated it centered on a cast cross-chain message that was accepted as official and allowed funds to be launched on Ethereum.
“So, this was not a wise contract situation with Kelp and this was not a wise contract situation with LayerZero, however this was a cross-chain message forgery,” Hoskinson stated. “So this was one thing new and totally different.”
The Cardano founder repeatedly returned to at least one design selection particularly: the reported use of a one-of-one verifier configuration. In his rationalization, greatest observe can be a multi-verifier mannequin equivalent to three-of-five, however KelpDAO’s setup relied on a single lively DVN. That, he argued, created an unacceptable single level of failure in a system already layered with staking wrappers, restaking protocols, bridges, and lending venues.
“The failure was within the verification logic, not the applying logic,” he stated. “Kelp did every thing proper from their contracts. They’re audited. They’re working properly. The applying’s working properly. It’s the bridge configuration.”
Hoskinson additionally emphasised that the business nonetheless lacks a settled account of precisely the place accountability lies.
In line with his abstract, three separate root-cause analyses emerged after the exploit: one from LayerZero, one from KelpDAO, and one tied to LlamaRisk and Aave governance discussions however none absolutely agree. That leaves open whether or not the break occurred within the messaging layer, verifier setup, KelpDAO’s acceptance logic, or within the seams between them.
What made the occasion particularly vital, in his view, was not solely the theft itself however what occurred subsequent. As an alternative of dumping the stolen rsETH on decentralized exchanges, the attacker allegedly used it as collateral in lending markets to borrow extra liquid property. That turned an exploit right into a balance-sheet downside for different protocols, leaving what Hoskinson described as poisoned collateral behind.
He referred to as that dynamic the true novelty of the incident. “It wasn’t only a bridge hack. It unfold to lending which then created dangerous debt contagion inside these lending protocols. It created a financial institution run and we noticed $13 billion of TVL pulled in a really brief time period for a $290 million hack.”
The Cardano founder stated the broader DeFi liquidity shock reached far past KelpDAO itself. Citing public reporting referenced in his walkthrough, he pointed to at the least 9 immediately affected protocols and stated Aave alone noticed between $6.6 billion and $8.45 billion in losses, whereas rsETH traded in a risky vary between about $1,600 and $2,500 throughout the 24 hours following the assault.
He additionally raised the opportunity of Lazarus involvement, although he acknowledged attribution stays unconfirmed. “There’s a number of proof right here that there’s Lazarus connections,” he stated, earlier than including that no unbiased forensics companies had definitively confirmed it.
At press time, Cardano (ADA) traded at $0.2504.
Featured picture created with DALL.E, chart from TradingView.com
Editorial Course of for bitcoinist is centered on delivering completely researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent evaluate by our workforce of prime know-how consultants and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.
