Arbitrum has taken action to secure a significant portion of the funds linked to the Kelp DAO exploit. They have stepped in to prevent the spread of the negative effects caused by the recent cross-chain security breach.
The following is a summary of the information that you will find on this page.
- Arbitrum’s Security Council has frozen 30,766 Ethereum linked to Kelp DAO’s attacker, and the funds are awaiting governance action.
- This exploit drains 116.500 rsETH, worth approximately $292 million. Initial findings indicate that the Lazarus Group is responsible for a coordinated network compromise.
- Kelp DAO stopped contracts and stopped additional losses as disputes continue over LayerZero’s risk exposure and security setup in Aave.
On Tuesday update Arbitrum’s Security Council has frozen 30,766 Ethereum from an Arbitrum-linked address to keep the funds from moving.
Arbitrum reported that it had carried out the operation without affecting network operations, users or applications. Assets will remain blocked until governance determines the next step.
“The Security Council acted with input from law enforcement as to the exploiter’s identity, and, at all times, weighed its commitment to the security and integrity of the Arbitrum community without impacting any Arbitrum users or applications,” The team stated.
It comes just days after the a major exploit The attack on Kelp DAO LayerZero bridge drains 116,500 RsETH worth around $292 Million.
LayerZero’s early analysis linked the attack with North Korea’s Lazarus GroupThis indicates a coordinated compromise between RPC nodes within the verified decentralized network.
Investigators determined that 2 nodes have been poisoned whereas a 3rd was disrupted by DDoS, which allowed for a malicious cross chain message to pass verification and minting rsETH.
Some of the assets that were stolen later became part routed into Aave V3When the attacker used wrapped ETH to borrow rsETH, it raised concern about system-wide potential exposure.
Kelp DAO reacted by pausing contracts, and blocking wallets linked to the breach. They prevented an additional 40,000 rsETH worth approximately $95 million from being drain. Recovery and coordination efforts with ecosystem partners continue.
The Security Design dispute is a hot topic
LayerZero, Kelp DAO and other parties have been arguing over how to build the bridge.
LayerZero stated that its project was built on the basis of a 1-1-decentralized, verified network. This setup is a failure single without independent verification.
“LayerZero and other external parties previously communicated best practices around DVN diversification to Kelp DAO,” The firm added that the project was underway “chose to utilize a 1/1 DVN configuration.”
Kelp DAO disputed that claimThe configuration should be included in the standard deployment framework.
“The 1-of-1 DVN setup is the configuration documented in LayerZero’s documentation and shipped as the default for any new OFT deployment,” Kelp, who added that design has been “affirmatively confirmed as appropriate” Discussions on earlier topics.
“This article is not financial advice.”
“Always do your own research before making any type of investment.”
“ItsDailyCrypto is not responsible for any activities you perform outside ItsDailyCrypto.”
Source: crypto.news
