Cardano founder Charles Hoskinson used his newest livestream to argue that the roughly $292 million KelpDAO exploit was not simply one other bridge failure, however a broader warning about how Ethereum’s restaking, cross-chain messaging, and lending stack can flip a single compromise into system-wide contagion.
In Hoskinson’s telling, the April 18 assault uncovered what he sees as probably the most fragile a part of fashionable DeFi: not essentially application-level sensible contracts, however the verification layers and interdependencies that sit between protocols. He mentioned the exploit, which concerned about 116,500 rsETH drained from KelpDAO’s Ethereum escrow, ought to pressure a wider trade dialog about bridge belief assumptions, verifier design, and the velocity at which dangerous collateral can unfold by way of lending markets.
Cardano Founder Warns Of Harmful Flaw At The Coronary heart Of Ethereum DeFi
Somewhat than ship a typical postmortem, Hoskinson mentioned he took inside incident-report materials and used AI to show it into an internet site that walked viewers by way of the mechanics of the exploit. That construction framed his bigger level: the failure, as he described it, didn’t start with damaged contract math inside KelpDAO itself, nor with an apparent accounting flaw at LayerZero. As a substitute, he mentioned it centered on a cast cross-chain message that was accepted as respectable and allowed funds to be launched on Ethereum.
“So, this was not a sensible contract subject with Kelp and this was not a sensible contract subject with LayerZero, however this was a cross-chain message forgery,” Hoskinson mentioned. “So this was one thing new and totally different.”
The Cardano founder repeatedly returned to 1 design selection particularly: the reported use of a one-of-one verifier configuration. In his rationalization, finest apply can be a multi-verifier mannequin akin to three-of-five, however KelpDAO’s setup relied on a single energetic DVN. That, he argued, created an unacceptable single level of failure in a system already layered with staking wrappers, restaking protocols, bridges, and lending venues.
“The failure was within the verification logic, not the appliance logic,” he mentioned. “Kelp did all the things proper from their contracts. They’re audited. They’re working properly. The applying’s working properly. It’s the bridge configuration.”
Hoskinson additionally emphasised that the trade nonetheless lacks a settled account of precisely the place accountability lies.
In accordance with his abstract, three separate root-cause analyses emerged after the exploit: one from LayerZero, one from KelpDAO, and one tied to LlamaRisk and Aave governance discussions however none totally agree. That leaves open whether or not the break occurred within the messaging layer, verifier setup, KelpDAO’s acceptance logic, or within the seams between them.
What made the occasion particularly vital, in his view, was not solely the theft itself however what occurred subsequent. As a substitute of dumping the stolen rsETH on decentralized exchanges, the attacker allegedly used it as collateral in lending markets to borrow extra liquid property. That turned an exploit right into a balance-sheet downside for different protocols, leaving what Hoskinson described as poisoned collateral behind.
He referred to as that dynamic the true novelty of the incident. “It wasn’t only a bridge hack. It unfold to lending which then created dangerous debt contagion inside these lending protocols. It created a financial institution run and we noticed $13 billion of TVL pulled in a really quick time period for a $290 million hack.”
The Cardano founder mentioned the broader DeFi liquidity shock reached far past KelpDAO itself. Citing public reporting referenced in his walkthrough, he pointed to at the very least 9 instantly affected protocols and mentioned Aave alone noticed between $6.6 billion and $8.45 billion in losses, whereas rsETH traded in a risky vary between about $1,600 and $2,500 through the 24 hours following the assault.
He additionally raised the potential of Lazarus involvement, although he acknowledged attribution stays unconfirmed. “There’s plenty of proof right here that there’s Lazarus connections,” he mentioned, earlier than including that no impartial forensics corporations had definitively confirmed it.
At press time, Cardano (ADA) traded at $0.2504.
Featured picture created with DALL.E, chart from TradingView.com
Editorial Course of for bitcoinist is centered on delivering completely researched, correct, and unbiased content material. We uphold strict sourcing requirements, and every web page undergoes diligent evaluation by our group of prime know-how specialists and seasoned editors. This course of ensures the integrity, relevance, and worth of our content material for our readers.
