# Сопутствующие статьи по теме Security

Новостной центр HTX предлагает последние статьи и углубленный анализ по "Security", охватывающие рыночные тренды, новости проектов, развитие технологий и политику регулирования в криптоиндустрии.

$292 Million KelpDAO Cross-Chain Bridge Hack: Who Should Foot the Bill?

On April 18, 2026, an attacker stole 116,500 rsETH (worth ~$292M) from KelpDAO’s cross-chain bridge in 46 minutes—the largest DeFi exploit of 2026. The stolen assets were deposited into Aave V3 as collateral, causing $177–200M in bad debt and triggering a cascade of losses across nine DeFi protocols. Aave’s TVL dropped by ~$6B overnight. This legal analysis argues that KelpDAO and LayerZero Labs share concurrent liability, with fault apportioned 60%/40%. KelpDAO negligently configured its bridge with a 1-of-1 decentralized verifier network (DVN)—a single point of failure—despite LayerZero’s explicit recommendation of a 2-of-3 setup. LayerZero, which operated the compromised DVN, failed to secure its RPC infrastructure against a known poisoning attack vector. Both protocols’ terms of service cap liability at $200 (KelpDAO) or $50 (LayerZero), but these limits are likely unenforceable due to unconscionability, gross negligence exceptions, and potential securities law invalidation (if rsETH is deemed a security under the Howey test). Aave’s governance also faces fiduciary duty claims for raising rsETH’s loan-to-value ratio to 93%—far above competitors’ 72–75%—without adequately assessing bridge risks, amplifying the systemic fallout. Practical recovery targets include LayerZero Labs (a registered Canadian entity), KelpDAO’s founders, auditors, and identifiable Aave governance delegates. The incident underscores escalating legal risks for DeFi protocols, infrastructure providers, and governance participants.

marsbit04/24 06:25

$292 Million KelpDAO Cross-Chain Bridge Hack: Who Should Foot the Bill?

marsbit04/24 06:25

AI "Transfer Station" Earning Millions Monthly? Five Questions Uncover the Truth of Token Arbitrage

The article "AI 'Transfer Station' Earns Millions Monthly? Five Questions Uncover the Truth of Token Arbitrage" explores the emerging business of API token transfer stations, which profit from global AI service price disparities and access barriers. These intermediaries purchase low-cost tokens from overseas AI providers (e.g., OpenAI, Claude) through grey-market methods—such as exploiting enterprise credits, bulk accounts, or subscription benefits—and resell them to Chinese users at a markup. Key drivers include the high cost of using top AI models (e.g., Claude Code costs ~$5 per million tokens), the performance gap between domestic and foreign models, and mismatches between subscription and API pricing. However, the practice carries significant risks: upstream token sources may be unstable or illegal; user data passing through intermediaries can be harvested or injected with hidden prompts; and models might be downgraded without disclosure. The market is evolving, with some operators now exporting cheaper Chinese models (e.g., Qwen3.5 at ~$0.11 per million tokens) to overseas users, leveraging price gaps. Yet, sustainability is low due to compliance crackdowns, instability, and reputational risks. Users are advised to employ detection methods (e.g., prompt adherence tests) and avoid sensitive data usage. The authors caution that while transfer stations offer short-term arbitrage, they lack long-term reliability and security compared to official APIs.

marsbit04/24 00:26

AI "Transfer Station" Earning Millions Monthly? Five Questions Uncover the Truth of Token Arbitrage

marsbit04/24 00:26

活动图片