LAYERZERO APOLOGY FOR KELP DAO INCIDENT: LayerZero said that it “made a mistake” allowing its own verification infrastructure to secure high-value crypto assets in a vulnerable configuration, marking a notable shift in tone after weeks of blaming developer Kelp DAO for a $292 million hack tied to North Korean attackers. The admission marks a notable shift after weeks of public finger-pointing between LayerZero and Kelp over responsibility for the April hack, which LayerZero had initially framed as an application-level configuration failure by Kelp. “First things first: an overdue apology,” LayerZero wrote in a blog. LayerZero initially blamed Kelp, arguing the protocol had chosen a risky “1-of-1” configuration in which only a single decentralized verifier network, or DVN, needed to approve cross-chain transfers, creating a single point of failure. A DVN is part of the infrastructure that verifies whether a transaction moving assets between blockchains is legitimate. “We made a mistake by allowing our DVN to act as a 1/1 DVN for high-value transactions,” the company said. “We didn’t police what our DVN was securing, which created a risk we simply didn’t see. We own that.” — Sam Reynolds Read more.

RONIN TO TRANSITION TO LAYER-2: Ronin, the gaming-centric blockchain once synonymous with the industry’s infamous $625 million exploit in 2022, is officially shedding its sidechain skin on May 12 to become an Ethereum layer 2 to improve security while maintaining throughput. Ronin, which announced the migration in April, will execute a hard fork at block 55,577,490, a process that will result in about 10 hours of downtime for users, the network said Monday on X. According to onchain data, the migration is expected to begin on Tuesday around 15:16 UTC. “Four years ago, we launched Ronin because Axie Infinity needed a faster and more efficient network,” Ronin said when announcing the migration. “It worked. Axie Infinity onboarded millions of gamers to crypto, and Pixels proved that it was possible to do it again.” The time has come to plug “back into the mothership.” While operating as an independent sidechain in mid-May 2022, Ronin suffered what is still today the largest DeFI bridge exploit in history. Layer 2 protocols benefit from tighter links to the underlying blockchain than sidechains, offering benefits that include greater security. — Olivier Acuna Read more.

ETHEREUM DEVELOPERS RELEASE “CLEAR SIGNING”: The Ethereum Foundation and a group of major crypto wallet developers are rolling out a new security standard designed to stop users from accidentally signing away their funds, a problem that has fueled some of the industry’s biggest hacks and scams. The initiative, called “Clear Signing,” aims to replace the confusing walls of code users currently see when approving Ethereum transactions with simple, human-readable explanations of what they’re actually agreeing to. The effort comes after years of phishing attacks and wallet drains that often boil down to the same issue: users unknowingly approving malicious transactions they don’t understand. The Ethereum Foundation pointed to incidents like the Bybit hack as examples of how attackers exploit “blind signing,” where users approve transactions filled with unreadable technical data. Right now, signing a crypto transaction can feel like clicking “accept” on a terms-of-service page written in another language. Wallets often display long strings of code that only highly technical users can decipher, leaving everyday traders vulnerable to fake apps, malicious links and compromised websites. — Margaux Nijkerk Read More.


In Other News


Regulatory and Policy


Calendar

More For You

Ethereum

The move comes after billions in losses from phishing attacks and wallet drains, with Ethereum pushing to make transaction approvals safer and easier to understand.

What to know:

  • The Ethereum Foundation and major wallet developers launched “Clear Signing,” a new standard designed to stop users from unknowingly approving malicious crypto transactions by replacing confusing code with human-readable explanations.
  • The move comes after billions in losses from phishing attacks and wallet drains, with Ethereum pushing to make transaction approvals…

About the Author

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Stories