Buy Crypto
Pay with
USD
USD
Buy & Sell
Hot
Supports Visa, Mastercard, SEPA & more
P2P
0 Fees
Flexible trading, zero fees
Gate Card
Use your crypto for payments worldwide
P2P Loan
Grow your wealth in fiat investment
Markets
Trade
Basic
Advanced
Futures
Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
U.S. Stocks
CFD
U.S. stock CFD derivatives
Futures
High leverage, 24/7 trading
Tokenized Stocks
Backed by real stock assets
GUSD
Mint GUSD for Treasury RWA yields
Earn
Launch
CandyDrop
tag
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Investment
Square
Square
Post, share, and explore crypto trends
Live
moments live
Live crypto market analysis
Chat
Chat with crypto traders
News
What is happening in crypto
flower_head
More
Promotions
AI
Others
TradFi
Rewards

Aave Says LayerZero Bridge Attack Released 116,500 rsETH on April 18, Blames RPC Poisoning

GateNews
Security IncidentsOn-Chain Data
AAVE-1.93%
ZRO0.08%
ETH-1.89%
ARB-1.4%
According to Aave's postmortem on X, the April 18 Kelp rsETH bridge attack was caused by RPC poisoning targeting LayerZero's single validator, not a protocol flaw. The attacker forged a cross-chain message, triggering the release of 116,500 rsETH on Ethereum without actual token destruction on Unichain. The stolen rsETH was deposited into Aave V3 on Ethereum and Arbitrum, where approximately 82,650 WETH and 821 wstETH were borrowed. Aave's Protocol Guardian and Risk Steward implemented protective measures. Services have since been restored: rsETH was burned on Arbitrum, LayerZero OFT adapters were fully replenished, and Kelp reopened withdrawals and bridging functions.
View Source
Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.

Related News

21h ago
Alephium TokenBridge Attacked, Hackers Steal $815K in 7 Minutes After Compromising 3 Guardian Keys
05-31 07:05
Crypto Network Attacks Exceed 80 in Q1 2026, Double Year-Over-Year; Losses Fall 69% to $496 Million
05-31 07:01
Gravity Bridge Suffers Security Breach, $5.4M in USDC, WETH, USDT Stolen
05-31 02:05
Aave Publishes Post-Mortem on April 18 rsETH Incident, 116,500 Tokens Released by Fake Bridge Message
05-31 00:22
Alephium TokenBridge Attacked, $815K Stolen as Hackers Control 3 of 4 Guardian Keys
In-Depth Analysis

Ethereum Tests Public Goods Funding Models From Gitcoin to Protocol Guild

Ethan Brooks05-31 03:02

Stake DAO Freezes Arbitrum vsdCRV Markets After Attacker Mints 5.4T Synthetic Tokens

Coinpedia05-29 08:33

Incident Report: Llamarisk, Aave Service Providers Detail Kelp rsETH Hack Across Ethereum and Arbitrum Markets

Coinpedia05-29 01:42
Comment
0/400
No comments