Cover photo

LayerZero Publishes Full Post-Mortem On $292M KelpDAO Exploit

LayerZero Labs traces the $292M April 18 attack on KelpDAO's rsETH bridge to TraderTraitor, a developer machine compromise, and poisoned internal RPC nodes.

LayerZero Labs published a full post mortem on the April 18 attack on KelpDAO's rsETH bridge. LayerZero attributed the attack to TraderTraitor, the same group behind the $1.5B Bybit hack in February 2025. The attack began six weeks earlier, on March 6, when an attacker tricked a LayerZero developer into cloning a malicious GitHub repo that dropped malware on their macOS machine, harvesting session keys and opening a path into LayerZero's internal RPC infrastructure.

The attacker quietly poisoned two internal RPC nodes to return forged chain state while appearing clean to LayerZero's own monitoring tools. On the day of the exploit, the attacker launched a denial-of-service attack against an external RPC provider to force the DVN signing service onto the compromised nodes exclusively.

The result was a valid attestation for a fabricated cross-chain message. LayerZero again pointed blame to KelpDAO's single-DVN setup that allowed one valid attestation to unlock 116,500 rsETH on Ethereum. LayerZero says it will now refuse to sign as the sole required attestor on any channel. KelpDAO's rsETH recovery entered its final stage earlier this month, and Kelp resumed withdrawals on May 15.


Sponsored by

post image

ETHConf lands in NYC June 8-10, bringing together 5,000+ attendees, 150+ speakers, and 100+ companies across Ethereum, stablecoins, and institutional adoption.

Get your tickets at ethconf.com and use code ETHDAILY for 30% off General and 20% off VIP.


Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content is at your own risk, and you should consult a qualified professional before making decisions. No fiduciary or advisory relationship is created

Cover photo

Block-Level Access Lists Explained

Toni Wahrstätter published an explainer on EIP-7928, the execution-layer headliner in Glamsterdam.

Ethereum researcher Toni Wahrstätter published an explainer on EIP-7928, the execution-layer headliner in the Glamsterdam upgrade. The proposal attaches a Block Access List to every Ethereum block, a structured record of every account and storage slot a block touches, along with a log of what changed after each transaction.

It allows clients to parallelize execution, prefetch state from disk before a block even starts running, compute post-state roots on the fly, and sync to the chain head without the slow peer-negotiation healing phase snap sync currently requires. Glamsterdam is expected to ship at a 200 million block gas limit before pushing higher.

ePBS, the Glamsterdam consensus layer headliner, scales it even further by giving validators up to 4x more time for execution. Wahrstätter frames the two proposals as a 10x scaling improvement from baseline, with no hardware upgrades required.


Sponsored by

post image

ETHConf lands in NYC June 8-10, bringing together 5,000+ attendees, 150+ speakers, and 100+ companies across Ethereum, stablecoins, and institutional adoption.

Get your tickets at ethconf.com and use code ETHDAILY for 30% off General and 20% off VIP.


Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content is at your own risk, and you should consult a qualified professional before making decisions. No fiduciary or advisory relationship is created

Cover photo

Devcon 8 Early Bird Tickets Now On Sale

General admission tickets are priced at $349 and are purchasable with ETH via Pretix, with Wave 1 opening in June at $699.

The Ethereum Foundation opened Early Bird ticket sales for Devcon 8, with general admission priced at $349. The tickets are only purchasable using ETH payments via built Pretix, an open-source ticketing platform. Tickets are available at tickets.devcon.org. Devcon 8 takes place from November 3 to 6, 2026, in Mumbai, India. Future sale waves will open at higher prices.

Wave 1 launches in June at $699. Discounted and free tickets are available or coming soon for Indian residents, core developers, OSS contributors, and students; Indian student tickets start at $25 and international student tickets at $99, with applications open now.


Sponsored by

post image

ETHConf lands in NYC June 8-10, bringing together 5,000+ attendees, 150+ speakers, and 100+ companies across Ethereum, stablecoins, and institutional adoption.

Get your tickets at ethconf.com and use code ETHDAILY for 30% off General and 20% off VIP.


Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content is at your own risk, and you should consult a qualified professional before making decisions. No fiduciary or advisory relationship is created

ETH Daily

Written by

Ethereum news in a brief. Learn about Ethereum, DeFi, staking, and ZK.

Subscribe

Support ETH Daily

Support this publication to show you appreciate and believe in them. As their writing reaches more readers, your coins may grow in value.