DeFi安全 on 全球全景日报 | goodinfo.net https://goodinfo.net/tags/defi%E5%AE%89%E5%85%A8/ AI 驱动的全球新闻过滤器 — 每小时自动聚合 AI科技、财经、国际、科学、Crypto 五大领域精选资讯。 Hugo -- gohugo.io zh-cn goodinfo.net Mon, 18 May 2026 14:54:00 +0800 [快讯] 又一加密跨链桥遭黑客攻击 损失1100万美元 https://goodinfo.net/posts/crypto/bridge-hack-11-million-exploit-2026-05-18/ Mon, 18 May 2026 14:54:00 +0800 goodinfo.net https://goodinfo.net/posts/crypto/bridge-hack-11-million-exploit-2026-05-18/ 核心摘要 又一个加密货币跨链桥协议遭到黑客攻击，损失约1100万美元。这是近期一系列跨链基础设施安全事件中的最新一起。此前KelpDAO遭 exploits 损失达2.93亿美元，引发业界对跨链安全性的广泛担忧。 English Summary Another crypto bridge protocol has been hacked, with losses of approximately $11M. This is the latest in a growing string of cross-chain infrastructure exploits. The incident follows the $293M KelpDAO hack, which has intensified scrutiny over cross-chain bridge security across the DeFi ecosystem. Sources: CoinDesk 核心摘要

又一个加密货币跨链桥协议遭到黑客攻击，损失约1100万美元。这是近期一系列跨链基础设施安全事件中的最新一起。此前KelpDAO遭 exploits 损失达2.93亿美元，引发业界对跨链安全性的广泛担忧。

English Summary

Another crypto bridge protocol has been hacked, with losses of approximately $11M. This is the latest in a growing string of cross-chain infrastructure exploits. The incident follows the $293M KelpDAO hack, which has intensified scrutiny over cross-chain bridge security across the DeFi ecosystem.

Sources: CoinDesk

]]> crypto 黑客攻击跨链桥DeFi安全 LayerZero承认在Kelp协议2.92亿美元漏洞中犯下错误 https://goodinfo.net/posts/crypto/layerzero-292m-kelp-exploit-admits-mistake-2026-05-09/ Sat, 09 May 2026 22:49:00 +0800 goodinfo.net https://goodinfo.net/posts/crypto/layerzero-292m-kelp-exploit-admits-mistake-2026-05-09/ 跨链互操作协议LayerZero承认在KelpDAO漏洞事件中承担主要责任，该漏洞导致约2.92亿美元资产损失。 事件概述

跨链互操作协议 LayerZero 正式承认，在其与 KelpDAO 相关的 2.92 亿美元漏洞事件中，自身决策存在重大失误。这是该事件爆发以来，LayerZero 团队首次明确承担主要责任。

漏洞经过

该漏洞涉及 KelpDAO 协议的高价值资产安全。LayerZero 的验证器（verifier）被允许 securing 高价值资产，但团队承认在架构设计上做出了错误判断——将自身验证器配置为处理关键资产的安全保障，而非采用更为分散的验证机制。

事件最初被归咎于"开发者配置失败"，但 LayerZero 随后修正了这一说法，明确表示"承认这一错误"（owns the decision），承认是自身的架构决策导致了安全漏洞。

影响分析

2.92 亿美元的损失使此次事件成为 2026 年规模最大的 DeFi 安全事件之一。KelpDAO 作为主要的 Restaking 协议，其安全性问题直接影响整个 EigenLayer 生态系统的信任基础。

此次事件再次凸显了跨链桥和互操作协议在 DeFi 安全中的核心脆弱性。LayerZero 此前也曾遭遇过重大安全事件，此次二次漏洞引发了社区对其安全架构的深刻质疑。

后续进展

LayerZero 表示将重新评估其验证器架构设计，并加强与生态合作伙伴的安全协作机制。社区呼吁对跨链协议的安全标准进行系统性审查。

来源：CoinDesk

]]> crypto LayerZeroKelpDAO跨链桥DeFi安全黑客攻击 Aave通过治理机制清算Kelp DAO攻击者剩余rsETH头寸 https://goodinfo.net/posts/crypto/aave-liquidates-kelp-dao-attacker-2026-05-07/ Thu, 07 May 2026 05:12:00 +0800 goodinfo.net https://goodinfo.net/posts/crypto/aave-liquidates-kelp-dao-attacker-2026-05-07/ Aave成功清算Kelp DAO攻击者剩余资产 去中心化借贷协议Aave通过治理程序操纵rsETH预言机价格，成功在攻击者欺诈性头寸中制造亏空，完成了对Kelp DAO攻击者剩余rsETH头寸的清算。 此次行动是DeFi协议在应对安全事件时的创新举措。Aave社区通过治理投票，临时调整了rsETH的预言机定价机制，使得攻击者的抵押品价值不足以支撑其借款头寸，从而触发清算。 Kelp DAO此前遭受攻击，大量rsETH代币被窃。Aave的这次清算行动旨在追回被窃资金，减少协议和用户的损失。 这一事件展示了DeFi治理机制在应对紧急情况时的灵活性和有效性。通过社区投票和协议参数的临时调整，DeFi协议能够在面对攻击时采取主动防御措施。 Aave Successfully Liquidates Kelp DAO Attacker’s Remaining Assets Decentralized lending protocol Aave completed the liquidation of the Kelp DAO attacker’s remaining rsETH positions through a governance process that manipulated the rsETH oracle price to generate a deficit in the attacker’s fraudulent position. This operation represents an innovative approach by a DeFi protocol responding to a security incident. The Aave community voted through governance to temporarily adjust the rsETH oracle pricing mechanism, making the attacker’s collateral insufficient to support their borrowing position and triggering liquidation. Aave成功清算Kelp DAO攻击者剩余资产

去中心化借贷协议Aave通过治理程序操纵rsETH预言机价格，成功在攻击者欺诈性头寸中制造亏空，完成了对Kelp DAO攻击者剩余rsETH头寸的清算。

此次行动是DeFi协议在应对安全事件时的创新举措。Aave社区通过治理投票，临时调整了rsETH的预言机定价机制，使得攻击者的抵押品价值不足以支撑其借款头寸，从而触发清算。

Kelp DAO此前遭受攻击，大量rsETH代币被窃。Aave的这次清算行动旨在追回被窃资金，减少协议和用户的损失。

这一事件展示了DeFi治理机制在应对紧急情况时的灵活性和有效性。通过社区投票和协议参数的临时调整，DeFi协议能够在面对攻击时采取主动防御措施。

Aave Successfully Liquidates Kelp DAO Attacker’s Remaining Assets

Decentralized lending protocol Aave completed the liquidation of the Kelp DAO attacker’s remaining rsETH positions through a governance process that manipulated the rsETH oracle price to generate a deficit in the attacker’s fraudulent position.

This operation represents an innovative approach by a DeFi protocol responding to a security incident. The Aave community voted through governance to temporarily adjust the rsETH oracle pricing mechanism, making the attacker’s collateral insufficient to support their borrowing position and triggering liquidation.

Kelp DAO was previously exploited, with a large amount of rsETH tokens stolen. Aave’s liquidation action aims to recover stolen funds and reduce losses for the protocol and its users.

This incident demonstrates the flexibility and effectiveness of DeFi governance mechanisms in responding to emergencies. Through community voting and temporary protocol parameter adjustments, DeFi protocols can take proactive defensive measures when facing attacks.

]]> crypto AaveKelp DAODeFi安全DeFi Security清算