Scan to download
BTC $60,500.55 +0.29%
ETH $1,554.75 -1.47%
BNB $573.61 +0.15%
XRP $1.08 -1.88%
SOL $61.66 -4.42%
TRX $0.3215 +0.25%
DOGE $0.0808 -0.77%
ADA $0.1583 -1.39%
BCH $214.11 -1.28%
LINK $7.32 -0.59%
HYPE $57.24 -0.71%
AAVE $60.42 -2.22%
SUI $0.7075 +0.91%
XLM $0.2066 +6.30%
ZEC $356.86 +8.63%
BTC $60,500.55 +0.29%
ETH $1,554.75 -1.47%
BNB $573.61 +0.15%
XRP $1.08 -1.88%
SOL $61.66 -4.42%
TRX $0.3215 +0.25%
DOGE $0.0808 -0.77%
ADA $0.1583 -1.39%
BCH $214.11 -1.28%
LINK $7.32 -0.59%
HYPE $57.24 -0.71%
AAVE $60.42 -2.22%
SUI $0.7075 +0.91%
XLM $0.2066 +6.30%
ZEC $356.86 +8.63%

aa

Aave releases post-attack investigation on Kelp rsETH bridge

Regarding the attack on the Kelp rsETH LayerZero V2 bridge that occurred on April 18, Aave released a post-incident investigation on the X platform, emphasizing that the exposure was primarily due to third-party bridge infrastructure rather than the protocol itself. The attacker executed an RPC poisoning attack targeting a single validator of LayerZero, forging a cross-chain message. This led to the release of 116,500 rsETH on the Ethereum side without actual destruction on Unichain. The attacker subsequently deposited the stolen rsETH into Aave V3 (Ethereum Core and Arbitrum), borrowing approximately 82,650 WETH and 821 wstETH.The Aave Protocol Guardian and Risk Steward immediately implemented protective measures for the rsETH and WETH reserves. Currently, the WETH and rsETH markets in the affected V3 deployments are operating normally. The rsETH held by the attacker on Arbitrum has been destroyed, the LayerZero OFT adapter has been fully recharged in five batches, rsETH support has been fully restored, and Kelp has reopened the withdrawal, bridging, and claims functions for rsETH. The WETH LTV in the affected markets has been reset to pre-attack values, and Aave V3 is fully operational across all markets except for rsETH.The Arbitrum DAO has voted to authorize the transfer of frozen ETH to Aave LLC, and it is currently awaiting on-chain execution. The court is still reviewing the substantive content of the injunction, and Aave LLC will continue to comply with the injunction during the court's deliberation. Ongoing projects include: the Aave risk framework from Llama Risk, the bridging assessment framework, the release of evaluation reports for currently live assets, on-chain execution of Arbitrum DAO votes, and the court's review of the injunction.

first_img Aave Labs has released an ARFC proposal aimed at establishing a unified standardized framework for the listing of technical assets

Aave Labs has released an ARFC proposal, suggesting the establishment of a standardized technical asset listing framework for Aave V3, V4, and Aave Horizon, setting unified technical requirements for asset listing, parameter expansion, and ongoing monitoring. The framework covers core areas such as ERC20 compatibility, oracles, permission control, minting and burning logic, pause and blacklist mechanisms, upgradability, exchange rates and yield mechanisms, token architecture, cross-chain bridge risks, audit and security history, and external dependencies. This framework does not replace market risk analysis and governance judgment but provides a technical qualification baseline.The framework aims to address "hidden risks" such as unlimited issuance, weak upgrade permissions, inconsistent bridging supply, opaque redemption paths, and reliance on off-chain custody. These issues may directly threaten the protocol's solvency, liquidation systems, and collateral parameter security. The framework particularly emphasizes additional scrutiny for cross-chain assets, yield-bearing assets, and off-chain dependent assets such as RWAs, including bridge structures, off-chain legal arrangements, custody mechanisms, and supply integrity. Assets with significant technical flaws may face reduced borrowing limits, restricted collateral parameters, delayed launches, or even recommendations to deny access to the protocol in the future.
app_icon
ChainCatcher Building the Web3 world with innovations.