Crypto Security Fears Rise As Chaos Labs Reveals Attempted Advanced Wallet Attack

bitcoinist2026-05-09 tarihinde yayınlandı2026-05-09 tarihinde güncellendi

Özet

Chaos Labs disclosed a sophisticated attempted hack targeting its operational wallets over a weekend, prompting several crypto firms to switch oracle providers. Borrowing platform Tydro, Solv Protocol, and Kelp DAO are among those migrating to Chainlink's oracle infrastructure, signaling a broader shift in confidence. Chaos Labs founder Omer Goldberg stated the attack was contained to routine operational wallets and that the core Chaos Oracle Network was not breached. The company rotated all keys and detected no further suspicious activity. Cyber professionals informed Chaos Labs that the methods were consistent with a nation-state attack, though no specific country was named. This incident occurs amid a difficult month for crypto security, including the high-profile Kelp DAO exploit in April.

Several crypto firms are switching oracle providers after Chaos Labs disclosed it was targeted in a sophisticated hacking attempt last weekend — one that authorities believe may have been carried out by a nation-state actor.

Firms Move To Chainlink

Borrowing platform Tydro announced it is migrating to Chainlink’s oracle infrastructure following the incident. Solv Protocol flagged similar plans, citing recent industry events as the reason for moving its cross-chain setup away from LayerZero.

Kelp DAO, still recovering from an April exploit, is also shifting its restaking token rsETH to Chainlink. The moves signal a broader loss of confidence in alternatives, even as Chaos Labs insists its core systems were never touched.

Chaos Labs founder Omer Goldberg said the attack was contained to operational wallets the company uses for routine on-chain activity. The oracle network itself — which supplies price and data feeds to blockchain applications — was not breached at any point.

“Chaos Oracles run in a fully isolated environment with nodes distributed globally, protected by layered security and cryptographic controls,” Goldberg said in a post on X.

The company rotated all keys following the incident and said no suspicious activity has been detected since.

Attack Consistent With Nation-State Methods

Cyber professionals and authorities working alongside Chaos Labs told the company the methods used were consistent with nation-state attacks, according to Goldberg.

He did not name a specific country. The investigation is ongoing, and Goldberg said more details would be shared as circumstances allow.

BTCUSD now trading at $80,337. Chart: TradingView

State-backed hacking groups, particularly those linked to North Korea, have long been seen as a serious threat to crypto infrastructure.

Reports indicate North Korea-affiliated actors stole at least $578 million across several incidents in April alone. North Korea has denied involvement in global cybercrime, calling such allegations unfounded.

Goldberg said Chaos Labs triggered its highest-severity incident response immediately after detecting the attempt. The company allocates a significant portion of its operating budget to cyber defense, monitoring, and detection systems.

A Difficult Month For Crypto Security

The Chaos Labs incident comes against a backdrop of widespread attacks across the industry. The Kelp DAO hack earlier in April was among the year’s most damaging, sending ripple effects through the crypto lending market and causing Aave’s total value locked to drop by $8 billion. Drift Protocol and at least a dozen other crypto entities were also hit during the same period.

Featured image from Pixabay, chart from TradingView

İlgili Sorular

QAccording to the article, why are several crypto firms switching oracle providers?

AThey are switching providers after Chaos Labs disclosed it was targeted in a sophisticated hacking attempt. This has led to a broader loss of confidence in alternative oracle providers, prompting firms like Tydro, Solv Protocol, and Kelp DAO to migrate to Chainlink's infrastructure.

QWhat was the specific target of the attack on Chaos Labs, and was the core oracle network compromised?

AThe attack was contained to operational wallets Chaos Labs uses for routine on-chain activity. The core Chaos Oracle Network itself was not breached or compromised at any point, as it runs in a fully isolated, globally distributed environment with layered security controls.

QWho do authorities believe may be behind the attempted hack on Chaos Labs, and why is this significant?

AAuthorities and cyber professionals believe the attack methods were consistent with those of a nation-state actor. This is significant because state-backed hacking groups, particularly those linked to North Korea, are considered a serious threat to crypto infrastructure and are known for large-scale thefts.

QWhat actions did Chaos Labs take immediately after detecting the hacking attempt?

AChaos Labs triggered its highest-severity incident response, rotated all its keys, and has detected no suspicious activity since. The company also stated it allocates a significant portion of its operating budget to cyber defense, monitoring, and detection systems.

QWhat broader context of crypto security does the Chaos Labs incident occur within, according to the article?

AThe incident occurs during a difficult month for crypto security, marked by widespread attacks. These include the damaging Kelp DAO hack in April, which impacted the lending market and Aave's TVL, as well as attacks on Drift Protocol and at least a dozen other crypto entities.

İlgili Okumalar

GPT-5 Also Has Tip-of-the-Tongue Moments, Google Tested 4.5 Million Times: The Keys Are Lost

Google researchers have discovered that advanced AI models like GPT-5 and Gemini 3 experience a phenomenon akin to the human "tip-of-the-tongue" state, where they possess knowledge but fail to retrieve it. Their study, "Empty Shelves or Lost Keys?" (ICML 2026), introduces the "Knowledge Portrait" framework to analyze factual knowledge in models, distinguishing between failure to encode a fact versus failure to recall it. Testing on 13 models across 2.15 million queries from the WikiProfile benchmark revealed that state-of-the-art models successfully encode 95-98% of facts into their parameters. However, when asked directly, they fail to recall 26-34% of these known facts. Enabling chain-of-thought ("thinking") reasoning reduces this recall failure to 11-12%, recovering 40-65% of the previously unrecalled but encoded facts. The research identifies two key bottlenecks: recalling obscure ("long-tail") facts and answering reversed queries (e.g., "Who is Tom Cruise's mother?" vs. "Whose son is Tom Cruise?"). While scaling model size effectively reduces encoding failures, it does little to improve recall rates. In larger models, recall failure becomes the dominant source of factual errors, accounting for over 70% of mistakes in GPT-5.2. The findings suggest that for top models, the primary challenge is no longer storing knowledge but accessing it efficiently. Future accuracy gains may depend more on improved inference-time methods and "meta-cognitive" abilities, enabling models to recognize when they need to engage in deeper reasoning to retrieve information they already know.

marsbit4 dk önce

GPT-5 Also Has Tip-of-the-Tongue Moments, Google Tested 4.5 Million Times: The Keys Are Lost

marsbit4 dk önce

The Dollar is a Technology: Stablecoins Are Exporting U.S. Institutions to the World

This article argues that stablecoins and blockchain infrastructure are becoming a vehicle for exporting American financial systems globally. The core thesis is that the U.S. dollar, as a "technology," is increasingly embedded in blockchain rails, moving beyond a reserve currency to represent the institutional stability of the United States itself. The piece highlights three key areas where this is happening: 1. **Cross-border payments and trade finance:** Companies like Keyrails use stablecoins and blockchain to streamline and secure trade finance for emerging markets (e.g., Nigeria-China trade), offering faster, often cheaper dollar liquidity than traditional systems. 2. **Programmable collateral and credit:** Platforms like SemiLiquid allow institutions to use tokenized assets (e.g., treasuries, stocks) as "programmable collateral" for loans without moving them from custody, unlocking capital efficiency and improving transparency in institutional lending. 3. **Financing real-world assets:** Protocols like USD.AI create lending markets for productive, hard-to-finance assets like AI GPUs, connecting global stablecoin liquidity to physical capital. The author concludes that the true value of these new blockchain-based financial platforms lies not just in transaction volume, but in the deep, hard-to-replicate "context" (data, trust, operational knowledge) they build around specific economic activities like trade and asset finance. This represents crypto's evolution into an operating system for real-world capital formation, moving beyond speculation.

marsbit8 dk önce

The Dollar is a Technology: Stablecoins Are Exporting U.S. Institutions to the World

marsbit8 dk önce

Ethereum Glamsterdam Upgrade: Largest-Scale Underlying Restructuring Yet, Mainnet Date Still Undecided

The upcoming Ethereum "Glamsterdam" upgrade is viewed by core developers as the most significant protocol-level refactoring since The Merge, fundamentally altering how the network processes transactions and manages its state to advance L1 scaling. Its core goals are: accelerating processing via parallelization, increasing capacity, and enhancing sustainability through adjusted fees that better reflect long-term data storage costs. The upgrade features two headline proposals. First, **ePBS (EIP-7732)** on the consensus layer aims to formalize proposer-builder separation directly within the protocol, eliminating reliance on off-chain relayers. This built-in mechanism is designed to provide a more secure and efficient block production pipeline, extending the critical validation window to allow the network to handle more data, particularly for Layer2s. Second, **BALs (EIP-7928)** on the execution layer introduces block-level access lists. These lists specify the data each transaction will access beforehand, allowing the network to identify and safely execute non-conflicting transactions in parallel, rather than strictly sequentially. This also speeds up new node synchronization. Glamsterdam also includes配套 proposals to reprice storage costs (aiming for a predictable ~120 GiB annual state growth) and the cost of data-reading operations to better align with modern hardware costs and prevent spam. Regarding the timeline, the initial schedule targeting a mainnet activation on September 16, 2026, has likely been delayed. Following the launch of a new dedicated testnet (Plataberget), the deployments on the Sepolia and Holesky testnets are now expected in September, with the mainnet launch potentially pushed to Q4 2026 or later, as developers prioritize correctness over a fixed date.

marsbit8 dk önce

Ethereum Glamsterdam Upgrade: Largest-Scale Underlying Restructuring Yet, Mainnet Date Still Undecided

marsbit8 dk önce

İşlemler

Spot
活动图片