# #951 - LayerZero Publishes KelpDAO Post-Mortem, Devcon 8 Tickets Open

*LayerZero full post-mortem on rsETH bridge exploit, Devcon 8 Early Bird tickets go on sale, and Toni Wahrstätter explains BALs.*

By [ETH Daily](https://ethdaily.io) · 2026-05-21

news, 2026, may2026

---

Quick Take
----------

*   LayerZero post-mortem.
    
*   Devcon 8 Early Bird tickets.
    
*   Block-Level Access Lists explained.
    

[

LayerZero Publishes KelpDAO Exploit Post-Mortem
-----------------------------------------------

Listen to this episode from ETH Daily - Ethereum News on Spotify. Devcon 8 early bird tickets are now on sale. LayerZero publishes a full post-mortem on the KelpDAO exploit. And Toni Wahrstätter explains Block-Level Access Lists. Read more: https://ethdaily.io/951 ETH Daily sponsorships are now open. Reach over 10,000 Ethereum-native subscribers every weekday.

https://spotify.com

![LayerZero Publishes KelpDAO Exploit Post-Mortem](https://storage.googleapis.com/papyrus_images/b20790dcd7b634a9e0f1730c5a71f2dd9ef09efe8781f4c0c97d46b156ab6d6f.jpg)

](https://open.spotify.com/episode/5QWPnEqAYastFVJQihYjmr)

* * *

[![](https://storage.googleapis.com/papyrus_images/451cc866a3d850b22fc8dd1db907f94a08090ffffe29963d21a2257b4abacfe7.png)](https://ethdaily.io/sponsor)

* * *

LayerZero Publishes Full Post-Mortem On $292M KelpDAO Exploit
-------------------------------------------------------------

LayerZero Labs published a full post-mortem on the April 18 attack on KelpDAO's rsETH bridge. The attack began on March 6, when a LayerZero developer was tricked into cloning a malicious GitHub repo that dropped malware on their macOS machine and opened a path into LayerZero's internal RPC infrastructure. The attacker poisoned two internal RPC nodes to feed forged chain state to the DVN signing service, producing a valid attestation for a fabricated cross-chain message that unlocked 116,500 rsETH on Ethereum. LayerZero says it will no longer sign as the sole required attestor.

[Read more →](https://ethdaily.io/layerzero-publishes-full-post-mortem-on-dollar292m-kelpdao-exploit)

Devcon 8 Early Bird Tickets Now On Sale
---------------------------------------

The Ethereum Foundation opened Early Bird ticket sales for Devcon 8, with general admission priced at $349. Tickets are only purchasable with ETH via Pretix at tickets.devcon.org. Wave 1 launches in June at $699. Devcon 8 takes place from November 3 to 6, 2026, in Mumbai, India. Discounted and free tickets are available or coming soon for Indian residents, core developers, OSS contributors, and students.

[Read more →](https://ethdaily.io/devcon-8-early-bird-tickets-now-on-sale)

Block-Level Access Lists Explained
----------------------------------

Ethereum researcher Toni Wahrstätter published an explainer on EIP-7928, the execution-layer headliner in the Glamsterdam upgrade. The proposal attaches a Block Access List to every Ethereum block, a structured record of every account and storage slot a block touches, along with a log of what changed after each transaction. BALs let clients parallelize execution, prefetch state from disk, and compute post-state roots on the fly. Combined with ePBS, Wahrstätter frames the two proposals as a 10x scaling improvement with no hardware upgrades required.

[Read more →](https://ethdaily.io/block-level-access-lists-explained)

Other News
----------

*   Vitalik [outlines](https://x.com/VitalikButerin/status/2056992175318073477) privacy efforts
    
*   PSE PlasmaBlind [payments](https://x.com/PrivacyEthereum/status/2057211868771426736)
    
*   L2Beat [lists](https://x.com/l2beat/status/2057098933935935627) Ronin
    
*   Tydro [case study](https://x.com/aave/status/2057166632267522064)
    
*   Lighter [RFQ in beta](https://x.com/Lighter_xyz/status/2057210636187119896)
    

* * *

Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content is at your own risk, and you should consult a qualified professional before making decisions. No fiduciary or advisory relationship is created

---

*Originally published on [ETH Daily](https://ethdaily.io/951)*