cross-chain

Chainlink has launched a cross-chain institutional repurchase product called Fulcrum to support cross-chain financing in the institutional repurchase market.Chainlink has demonstrated this financing workflow in collaboration with DTCC at the Sibos conference, showcasing how Fulcrum operates in institutional repurchase scenarios, with DTCC serving as the U.S. securities depository and clearing agency. Currently, integration work with various financing venues for Fulcrum is still ongoing.

USD.AI announced that USDai and sUSDai have now been extended to Solana through LayerZero's OFT standard, allowing them to circulate as unified assets across supported networks.LayerZero stated that in addition to Solana, the two assets also support Arbitrum, Ethereum, Plasma, and Base; as of now, the cumulative cross-chain transfer amount achieved through the OFT standard has exceeded 2 billion dollars.

Co-founder and Chief Operating Officer of the cross-chain trading platform Relay, Jason Maier, stated that the team discovered an issue with the Relay API over the weekend, which exposed pending transaction information before trade execution. MEV seekers exploited the pending routing status to infer on-chain paths and front-run trades before order execution, resulting in worse execution prices for users trading through Relay.This activity occurred from September 12 to September 26, primarily concentrated from September 23 to 26. Seekers profited approximately $136,000 from this, affecting around 5,600 users, with a median impact of $11.88. Relay will pay a $50,000 bounty to Outputlayer for reporting the issue and will automatically compensate affected users without the need for applications; funds will be directly sent to wallets, with a total compensation amount of approximately $312,000.Jason Maier stated that MEV can arise through public mempool exposure, order detail inference, malicious participation in auctions, or data gaps between service providers, and protecting a single link in the transaction path is not sufficient. He mentioned that the team will continue to enhance the execution quality and privacy of the entire transaction path and called on security researchers to report vulnerabilities when discovered.

On Monday, the oracle network Chainlink released the cross-chain interoperability protocol CCIP 2, making significant upgrades to its communication and cross-chain bridge infrastructure. The new version allows enterprises to add their own security verification checks on top of Chainlink's default network of 16 independent node operators. Enterprises can run their own validators or hire external service providers such as Infosys and Nethermind. Chainlink stated that users should not be forced to become "cross-chain security infrastructure experts."This upgrade comes about five months after the Kelp DAO was hacked in April of this year. The attackers are reportedly linked to the North Korean Lazarus group, stealing approximately $292 million in rsETH by deceiving the single validator relied upon by the Kelp cross-chain bridge, which operates on LayerZero. LayerZero blamed Kelp for using only a single validator, while Kelp stated that LayerZero employees had reviewed its setup and raised no objections. Kelp subsequently announced that it would migrate rsETH to Chainlink.The upgrade also adjusts the security mechanism that Chainlink had previously heavily promoted; its risk management network will no longer operate as an independent review node, with such independent checks now provided by optional validators. This means that users who have not added any validators currently rely on a single validation network, whereas previously they relied on two. Existing Chainlink users have been automatically migrated to the new version, but the company has not disclosed which institutions are using the new validators, only stating that Aave and Maple have begun adopting other features of the upgrade.

According to on-chain analyst Ai Yi (@ai_9684xtpa), the GMGN associated address deposited 6,100 ETH to Coinbase, worth approximately 16.38 million USD.Looking back, this ETH was transferred from the Robinhood network to the Ethereum mainnet 6 days ago, possibly as revenue from transaction fees on the Robinhood network.

KelpDAO stated on platform X that it has filed a lawsuit against LayerZero and its co-founder Bryan Pellegrino, seeking accountability for the rsETH cross-chain bridge attack incident that occurred earlier this year. The lawsuit claims that LayerZero failed to adequately disclose its inherent technical weaknesses and risks; failed to prevent its security infrastructure from being compromised; and that LayerZero had previously reviewed and approved Kelp's deployment and configuration in writing.Officials stated that LayerZero has publicly attributed responsibility to itself in recent months. Since the occurrence of the attack, the team has taken action to ensure the safety of user assets, including migrating the rsETH cross-chain bridge to a more secure cross-chain standard.LayerZero co-founder and CEO Bryan Pellegrino tweeted that KelpDAO's related claims lack basis and that he will respond and defend in Vancouver.Previously, LayerZero released an incident report indicating that on April 18, 2026, the KelpDAO rsETH cross-chain bridge built on LayerZero was attacked, resulting in a loss of approximately 116,500 rsETH, valued at around $292 million.

NEAR Protocol posted on platform X that the NEAR platform has launched a privacy limit order feature, supporting assets from any blockchain.Users can set a target price, and when the market price reaches the target price, the order will be executed automatically. The order will not be publicly displayed while waiting to be executed.

Cross-chain aggregator Jumper announced plans to conduct its first JUMP token sale through Legion, while independently splitting from its incubator LI.FI to become a standalone company. Jumper claims its lifetime trading volume exceeds $40 billion, with over 100,000 monthly active users, ranking first in cross-chain bridging transaction volume, holding a market share of over 15%. The company is expanding its coverage to include exchanges, cross-chain, perpetual contracts, tokenized stocks, and other real-world assets, as well as yield opportunities.Jumper CEO Marko Jurina stated: Cross-chain bridging is the starting point for Jumper, and hopes Jumper will be the application users open when trading, investing, or transferring value on-chain. Jumper Perps (aggregated perpetual contract venue) is set to launch in the coming weeks. LI.FI will focus on orchestrating infrastructure, while Jumper will concentrate on consumer-facing applications.This Legion sale will be Jumper's first financing, with proceeds aimed at accelerating product development, user acquisition, and distribution. The JUMP token is planned to launch separately after the financing. The company stated it will not conduct separate equity financing rounds, with JUMP intended to be the sole ownership and exposure asset for users, contributors, and investors. Jurina remarked: The token should be the only way to own the value created by Jumper, and token priority ownership should become the industry standard.

The cross-chain asset protocol Universal has announced its shutdown. The protocol will continue to operate normally for the next 60 days, until November 17, 2026. Universal was launched two years ago to build Universal Assets (uAssets), bringing assets such as SOL, XRP, and DOGE into a new ecosystem, supported 1:1 by underlying assets, and has supported over 80 types of assets.The team stated that the scale has not reached a long-term sustainable level, hence the decision to shut down. According to the tokenized asset data platform RootData, Universal announced last February that it had completed a $9 million financing round, led by a16z Crypto, with participation from Coinbase Ventures and others.

The cross-chain bridge protocol Across Protocol officially announced that Across Protocol has been transferred to a new company, Across, Inc. (AcrossCo), and the ACX token will gradually be phased out. After January 8, 2027, all ACX tokens will be rendered obsolete and will no longer have governance, utility, or economic functions. Risk Labs and AcrossCo will also no longer bear related obligations.Holders can exchange through the portal at exchange.across.to at a valuation of $0.04375 per token before that date: first, for a 1:1 exchange for equity in AcrossCo (first come, first served, minimum 250,000 ACX, lower amounts subject to allocation, KYC required, U.S. applicants must be accredited investors); second, for an equivalent amount of USDC (sanctions screening required). After the deadline, equivalent exchange conditions cannot be guaranteed.

The managed cross-chain bridge Long released a post-mortem report on the WETH hacking incident on September 14. On that day at 07:07 UTC, the bridge paid 46.7928 WETH (approximately $118,000) to the attacker's address from the Robinhood Chain treasury. There were no user fund losses, and the treasury has been fully replenished from platform revenue. The bridge has been rebuilt, reinforced, and continues to operate. During the recovery period, some orders were delayed by several hours.The bridge's keeper read the burn events on Arc via RPC to release assets. At that time, the official mainnet endpoint was not online, relying on public RPC. After the backup endpoint was overloaded, the main endpoint provided the keeper with forged withdrawal event logs within a short window, which did not exist on Arc. The keeper's protection at that time was against replay and double spending, and did not question the data source, thus releasing the WETH. Meanwhile, three other forged withdrawals were completely reverted on-chain. The forged events entered through the RPC channel, and the contract, keys, and treasury were not breached.

Pump.fun announced that Ink chain token trading has launched on its App. Users can seamlessly trade Ink chain tokens using USDC without cross-chain transactions.

The cross-chain liquidity protocol Symbiosis announced that it has encountered a security incident. Around September 11, 2026, at 04:28 UTC, attackers exploited a vulnerability in the Bitcoin bridge to carry out the attack. The BTC route has been suspended, while other routes are still operating normally.The official statement indicated that only the Bitcoin bridge was affected and has been isolated from other systems. The remaining routes, including EVM chains, TRON, TON, and components like Octopools, were not impacted. The team has recovered approximately 15 BTC, which is stored in a multi-signature wallet controlled by the team. The official has offered a white hat bounty to the attackers, amounting to 20% of the funds, valid until September 13, 2026; thereafter, an equivalent proportion will be offered to informants who can assist in recovering the funds.The final loss assessment is still ongoing, and confirmation data will be released later. The official is contacting affected liquidity providers one by one and developing a compensation framework. The relay group is still operational and ensuring network security.

Osmosis posted on platform X that due to a security incident with the Nomic nBTC cross-chain bridge, Osmosis has suspended the minting and redemption of BTC Alloyed assets, and deposits and withdrawals have been simultaneously suspended.The BTC on Osmosis is backed by 30% nBTC. The team will soon release a complete post-mortem analysis and recovery plan. BTC in the pool is still tradable, and users are reminded to be aware of the risks.

According to on-chain analysts' monitoring, four addresses belonging to the same entity became active simultaneously after being dormant for six months, purchasing 13,290.6 ETH through Cowswap at an average price of $2,511, and spending 2,500 ETH via Near Intents to buy 6,601.37 ZEC.At the same time, a service fee of 16.75 ETH was paid, approximately $42,000, and the related purchases are still ongoing.

LayerZero announced that the South Korean digital asset custody institution BDACS has adopted LayerZero Labs' OFT (Omnichain Fungible Token) standard for the Korean won-backed stablecoin KRW1, achieving native cross-chain interoperability.LayerZero stated that KRW1 thus becomes the first Korean won stablecoin that can be natively transferred across major DeFi ecosystems, with its supply able to flow seamlessly across networks without the need for wrapped tokens, avoiding liquidity fragmentation.

According to Token Terminal data, the scale of ETH transferred from Ethereum L1 to Robinhood Chain L2 has exceeded 700 million dollars, growing by approximately 150% in the past month.

The Federal Bureau of Investigation (FBI) tracked and seized over $560,000 in cryptocurrency originally intended for Hamas by combining blockchain analysis, human intelligence, and court orders. The investigation involved shared wallets, cross-chain bridges, exchanges, and stablecoin accounts. Three seizure operations occurred in March, June, and October 2025.Investigators found that multiple donation addresses associated with Hamas's military wing, Al Qassam Brigades, used the same Gas wallet to pay transaction fees, and visualized funds flowing from donation wallets to operational wallets and related infrastructure through Reactor. In the June 2025 case, funds circulated through new addresses, accounts, over-the-counter brokers, and suspected money mule accounts; in October, the network switched to one-time donation wallets and cross-chain bridges. Court orders required Tether to destroy USDT from specified addresses and to reissue equivalent assets to law enforcement wallets, while Binance was instructed to transfer the balances of three accounts.