idg

etherFi posted on platform X that its Liquid treasury is temporarily not directly exposed to the Kelp rsETH event risk, but as a precautionary measure, it has suspended the LayerZero cross-chain bridging functionality for weETH and eETH until the root cause of the Kelp rs ETH event is clarified. Meanwhile, for Liquid (ETH, BTC, USD), sETHFI, and eBTC products, the relevant Teller contracts have been suspended to block the LayerZero OFT bridging path, and the deposit and withdrawal functions for the related assets have also been suspended. They are currently working closely with security partners and will provide timely updates once more details are confirmed.

Morpho stated: "Shortly after the KelpDAO and LayerZero incidents, Morpho has, as a precaution, suspended the OFT cross-chain bridge for MORPHO tokens on Arbitrum. The cross-chain functionality on Arbitrum will remain suspended until the root cause of the rsETH incident is identified."

Sky (formerly MakerDAO) posted on the X platform stating that it has currently suspended the omnichain fungible token (Omnichain Fungible Token) cross-chain bridging function for USDS. It will further assess the impact of the rsETH-related security incident while emphasizing that its protocol itself and the USDS contract have not been affected temporarily. USDS remains fully collateralized as designed by the protocol and can be verified on-chain at any time.

Euler Labs announced on the X platform that as a precaution, the LayerZero OFT cross-chain bridge for EUL is temporarily suspended during the investigation into the cause of the rsETH incident, and emphasized that EUL has no exposure to this rsETH incident. An update will be released after the cross-chain functionality is restored.

In response to the recent Kelp DAO cross-chain bridge attack, Ondo Finance stated on the X platform that Ondo Bridge is currently operating safely, with no financial losses or abnormal events.Ondo Bridge is also built on LayerZero and employs a customized security architecture consisting of four independent decentralized verification networks (DVN), namely FCAT, LayerZero Labs, Canary, and Ondo's self-developed verifier. Even if a single DVN encounters issues, the security of the transfers can still be guaranteed.

On-chain data shows that the Kelp DAO's rsETH bridging protocol based on LayerZero has allegedly been exploited by hackers, resulting in a loss of 116,500 rsETH, worth approximately $292 million.Kelp DAO officials stated that they have detected suspicious cross-chain activities involving rsETH, and have now suspended the rsETH contracts on the mainnet and multiple Layer2s. They are working with security experts and will provide updates on the situation.

Circle announced on the X platform that the USDC Bridge service has officially launched. It is reported that this is a way to directly transfer USDC across chains, built and operated by Circle, supporting native burn-to-mint transfers, without the need to select a route, and automatically handling gas fees on the target chain.

The Web3 asset data platform RootData has outlined 78 business partners of Anchorage, including over 30 DeFi protocols, more than 20 blockchain infrastructure projects, as well as various stablecoins and payment settlement networks, covering the complete path from asset issuance to on-chain operations.Represented by institutions like BlackRock, products such as ETFs bring funds into the crypto market, after which Anchorage assumes custody and compliance responsibilities. These assets are then deployed on-chain, participating in liquidity operations and yield generation through DeFi protocols, stablecoin systems, and infrastructure networks. Ultimately, they flow back into the traditional financial system through OTC, trading, and clearing paths.In this process, Anchorage's role is not just "custody," but a key node throughout the entire lifecycle of funds, with its upstream and downstream including crypto-native institutions such as A16z, Blockchain Capital, Electric Capital, and Defiance, as well as DeFi protocols, L1/L2 networks, stablecoins, and clearing and settlement systems, along with fintech companies like AngelList and Series Financial, as well as payment companies and core banking systems.Anchorage's partner strategy emphasizes "key path coverage," ensuring that funds have corresponding infrastructure at every stage. As compliant entry points like ETFs gradually open up, the crypto market shifts towards asset allocation-driven strategies, and bridge-type institutions like Anchorage are moving from the background to the core. Related compilation: Anchorage Web3 Partner Network Compilation (continuously updated)Crypto projects actively showcasing their partner networks have become a key way to enhance transparency and market trust. It is reported that RootData welcomes Web3 project parties to claim data and continues to track and open more project business relationship disclosure channels. The platform has continuously released multiple editions of crypto project ecological maps, nominating Web3 ecological partners for upstream clients such as Visa, Mastercard, and Coinbase.If you wish to nominate your project in future ecological maps, please fill out the RootData 2026 Industry Ecosystem Mapping form to supplement your important clients and partners.

According to Hyperbridge's official disclosure, the loss from the Token Gateway vulnerability incident has been revised from an initial estimate of $237,000 to approximately $2.5 million, with the increase mainly coming from losses in incentive pools on Ethereum, Base, BNB Chain, and Arbitrum.The attacker extracted about 245 ETH from the relevant contracts and then bypassed the MMR proof verification mechanism by forging cross-chain messages, minting 1 billion bridged DOT and selling them into a thinly traded market. Currently, some of the stolen funds have been traced on-chain to Binance, and Hyperbridge is collaborating with Binance's compliance team and law enforcement agencies for an investigation.Native DOT of Polkadot and products like Intent Gateway are unaffected, while the Token Gateway and the bridged DOT contracts on the four affected EVM chains remain suspended. The MMR verification logic patch is undergoing external audit, and the bridging functionality will be restored after the audit is completed.

According to official news, the BTTC Bridge transaction record page has completed its functional upgrade and is officially online, aiming to provide cross-chain users with a more efficient and transparent asset tracking experience. This update introduces a dual-view independent display mode for "All Records" and "In Progress," and launches a multi-dimensional filtering tool that supports flexible combination retrieval by transaction status, type, and custom date range. At the same time, the page has strengthened the exclusive identification marks for incoming, outgoing, and cross-chain activities, helping users quickly locate the flow of funds. Users can now access the platform to experience a clearer cross-chain transaction management view, and the team will continue to refine product details to serve a broader range of on-chain interaction scenarios.

According to on-chain analysis platform Arkham (@arkham), attackers exploiting the Bridged Polkadot vulnerability have transferred all stolen funds into Tornado Cash, involving an amount of approximately $269,000.

The blockchain interoperability protocol Hyperbridge disclosed details of the previous DOT attack incident, resulting in a loss of approximately $237,000. The root of the vulnerability lies in the HandlerV1 contract's VerifyProof() function, which lacks input validation and does not verify the leaf_index leafCount, allowing attackers to forge Merkle proofs.Using this, the attacker gained administrator privileges for the DOT token bridging contract on Ethereum, subsequently minting 1 billion bridged DOT (which is about 2800 times the legitimate circulation of approximately 356,000) and cashing out on decentralized exchanges. Hyperbridge stated that it is currently working with security partners to trace the funds, and cross-chain functionality will remain suspended until the investigation is completed.

Polkadot stated on the X platform that the team has noticed security issues with the Ethereum gateway contract of Hyperbridge. This vulnerability only affects DOT tokens bridged to Ethereum via Hyperbridge, while DOT within the Polkadot ecosystem and other bridging solutions are not affected. Polkadot and its parachains and native DOT remain secure. Hyperbridge has suspended operations during the investigation.According to previous news from ChainCatcher, the Hyperbridge contract encountered an MMR proof replay vulnerability, resulting in a loss of approximately $242,000.

Polkadot responded to the Hyperbridge vulnerability incident, stating that the vulnerability only affects DOT assets bridged to the Ethereum network via Hyperbridge and does not involve native DOT within the Polkadot ecosystem or assets from other bridging paths. The official statement indicated that the Polkadot mainnet and its parachains are operating normally, and related assets remain secure.Currently, Hyperbridge has suspended operations, and the incident is under further investigation. Previous reports indicated that the Polkadot bridge vulnerability was exploited, resulting in the issuance of 1 billion DOT on the Ethereum network, which has been sold off, with the attacker profiting $237,000.

According to monitoring by BlockSec, the HandlerV1 contract managed by Hyperbridge has a Merkle Mountain Range (MMR) proof replay vulnerability on the Ethereum network, resulting in a loss of approximately $242,000. The vulnerability arises from the proof not being bound to the request, allowing attackers to replay historically valid proofs and combine them with new forged requests to perform actions such as changing administrator permissions.In a specific case, the attacker changed the administrator of the Polkadot (DOT) Token and then exploited the permissions to mint additional DOT for profit. Related attack transactions have been observed, including changing the administrator and minting of DOT Token (loss of approximately $237,400), changing the administrator and minting of ARGN Token (loss of approximately $3,800), and host withdrawals, among others.Previously, it was reported that the Hyperbridge gateway contract was attacked, resulting in the minting and dumping of 1 billion DOT on Ethereum.

According to monitoring by Pidun, 1 billion DOT tokens were abnormally minted and sold on the Ethereum chain.On-chain data shows that about 1 hour ago, the attacker transferred the contract control to a malicious address by tampering with administrator permissions, subsequently minting 1 billion DOT and immediately selling them, causing the coin price to plummet from $1.22 to nearly zero.The incident is still unfolding, and Polkadot's official response has not yet been released. The target of this attack was bridging assets on Ethereum, not the native Polkadot chain.

According to DefiLlama data, the net inflow of funds for Ethereum cross-chain bridges in the past 7 days reached $11.112 billion, ranking first among all public chains. Following are Solana and Polygon, with net inflows of $497 million and $397 million, respectively.Base, Plasma, Ink, Avalanche, Arbitrum, and Tron also experienced varying degrees of net inflow, amounting to $275 million, $214 million, $165 million, $157 million, $126 million, and $54 million, respectively.

According to official news, the decentralized GPU cloud computing infrastructure platform Aethir confirmed that its Ethereum-related bridging contract was attacked. The team promptly disconnected the affected contract and worked with major exchanges to blacklist the hacker's wallet, limiting the losses to under $90,000.Previously, blockchain security company PeckShield estimated the losses to be $400,000. The attacker exploited Aethir's cross-chain smart contract AethirOFTAdapter to transfer the stolen funds from the BNB Chain to Tron.Aethir stated that its Ethereum mainnet ATH token supply was unaffected and plans to announce a detailed compensation plan and incident analysis next week, collaborating with exchanges such as Binance, Upbit, and Bithumb to freeze funds. The Web3 security platform ZeroShadow is participating in the investigation. Aethir aims to achieve revenue of $127.8 million by 2025, with over 440,000 GPU containers deployed globally.

According to BBX data, yesterday, with the start of the first complete trading week of the second quarter, global listed companies disclosed several key data points regarding "cross-border positioning":$15 million initial position: DraftKings (NASDAQ: $DKNG) disclosed that it has completed a strategic allocation of $15 million in Bitcoin. As a North American sports betting giant, the company plans to use this reserve as the underlying clearing fund pool for its upcoming "Web3 event prediction market."100% hash rate retention: Greenidge Generation (NASDAQ: $GREE) released operational guidance for March and early second quarter yesterday, announcing that its mining facility in New York State has officially entered the 100% output retention phase and has further reduced the acquisition cost of each BTC by utilizing low off-peak electricity prices.$5 million IP anchoring: Lionsgate (NYSE: $LGF.A) confirmed yesterday that it has allocated $5 million to purchase Bitcoin. This marks the first time a leading Hollywood studio has included digital hard assets on its balance sheet, aiming to provide real asset backing for the on-chain tokenization (RWA) of its future film IP.Treasury hedge infrastructure: Cboe Global Markets (BATS: $CBOE) announced yesterday the launch of two brand new "enterprise-level Bitcoin volatility index options," specifically designed for listed companies with more than 500 BTC on their balance sheets, helping them smooth out the fluctuations in book value during quarterly reporting periods.

The enterprise-level modular L1 public chain ENI has announced a strategic partnership with the globally leading on-chain investment ecosystem Republic Crypto. Republic Crypto is backed by top institutions such as Hamilton Lane and Hashed, with an ecosystem covering over 2,500 enterprises.The two parties will combine Republic Crypto's expertise in token economics and top Western capital markets with the advantages of ENI's enterprise-level modular L1 architecture to open up liquidity channels for real-world assets (RWA) between the East and West, facilitating seamless global settlement for institutional assets and promoting the scaling of Web3 business.