ZRO chute de 22 % : comment la décote systémique du jeton pont peut-elle refléter la tarification du risque de sécurité de l'infrastructure inter-chaînes ?

Cross-chain interoperability protocol LayerZero’s native token ZRO experienced a sharp price adjustment in April 2026. As of April 22, 2026, Gate行情 data shows that ZRO was priced at $1.61, with a 7-day decline of 17.82%, a 30-day decline of 18.86%, and a one-year decline of 35.61%. Meanwhile, its market capitalization fell back to $405 million, with a circulating supply of approximately $1.6 billion, and a current circulation rate of only about 25.23%.

This decline was directly triggered by the KelpDAO rsETH cross-chain bridge attack incident. On the evening of April 18, attackers forged cross-chain messages, stealing 116,500 rsETH from KelpDAO’s bridging contract, worth approximately $294 million. ZRO dropped from around $2 before the incident to $1.4, with a maximum single-day drop of over 22%. Although the price recovered somewhat afterward, cracks in market confidence were clearly visible.

However, attributing ZRO’s decline solely to a security incident is insufficient to explain the deeper shifts in its underlying pricing logic. The core issue lies in the market systematically applying a security discount to “bridge tokens,” a mechanism shaped by both event-driven emotional shocks and structural risk reassessment.

The Technical Roots of the $294 Million Cross-Chain Attack

At 17:35 UTC on April 18, 2026, a wallet washed through Tornado Cash sent a cross-chain message to LayerZero’s EndpointV2 contract, claiming that a user on a certain chain wanted to transfer rsETH back to the Ethereum mainnet. LayerZero’s decentralized validator network (DVN) verified this message, and KelpDAO’s bridge contract on the mainnet subsequently released 116,500 rsETH to an address controlled by the attacker.

The problem was that the “source chain” never actually received the rsETH deposit. The attacker poisoned the RPC infrastructure relied upon by the DVN, combined with DDoS attacks to force the system to switch to malicious nodes, successfully forging cross-chain transaction verification. Forty-six minutes later, KelpDAO’s emergency multisig only paused the process, by which time the attacker had deposited the stolen rsETH into Aave V3 as collateral and borrowed about $236 million worth of wETH.

On a technical level, KelpDAO’s bridge contract used a 1/1 DVN configuration—relying on a single validator to confirm cross-chain messages. This setup shrinks the security boundary of the entire cross-chain verification process to a single point; if that infrastructure is compromised, the entire verification chain is exposed. In fact, Dune Analytics’ subsequent analysis shows that among 2,665 LayerZero-based OApp contracts, up to 47% adopted the same 1/1 DVN configuration, involving 1,252 projects. This indicates that the security vulnerabilities exposed by the KelpDAO incident are not isolated but represent a widespread systemic risk across the ecosystem.

From Incident Shock to Systemic Discount

The price trajectory of ZRO clearly reflects how the market prices security events. After the incident, ZRO plunged from $2 to $1.4, a 24-hour decline of 18.15%. During the same period, AAVE fell 17.03%, LDO dropped 13.11%, and KERNEL declined 11.26%. The entire Liquid Restaking Token sector and related DeFi protocol tokens suffered varying degrees of impact.

This downward transmission involved two layers. The first was a direct liquidity shock: during ZRO’s rapid decline, a whale holding long ZRO positions on Hyperliquid was partially liquidated, incurring a loss of about $2.88 million, with unrealized losses exceeding $750,000. The Polymarket address “greenrooibos” also transferred about 97,800 ZRO (roughly $157,000) to exchanges shortly after, with unrealized losses of about $47,000 compared to two weeks prior. Forced liquidation of leveraged positions and large holders’ stop-loss exits reinforced downward price pressure.

The second layer involved structural correlated pricing adjustments. As a liquidity-staked token, rsETH is widely embedded in lending protocols like Aave, SparkLend, Fluid, and yield strategies, forming a deeply interconnected DeFi asset network. When the security of rsETH’s cross-chain bridge was discredited, other protocols relying on LayerZero infrastructure quickly took defensive measures—over 15 protocols temporarily paused LayerZero OFT cross-chain bridging functions, including Ethena, TRON DAO, ApeChain, ether.fi, and Solv Protocol. Curve Finance also paused LayerZero-based CRV cross-chain bridges and crvUSD rapid bridges.

This “contagion of correlation” reveals a previously underpriced reality: when a foundational cross-chain protocol is embedded broadly in DeFi, its security incident’s impact does not stop at a single application but propagates through the asset network, ultimately manifesting as systemic discount in the native token’s price.

Redefining Bridge Tokens: From “Protocol Governance Rights” to “Infrastructure Insurance”

Before the KelpDAO incident, market valuation frameworks for ZRO mainly revolved around LayerZero’s cross-chain network effects and institutional narratives. LayerZero had integrated over 165 chains, with total cross-chain volume exceeding $225 billion, and over 159 million messages processed. Starting March 2026, Stargate’s 100% revenue flow was directed to ZRO buybacks, marking the first time protocol cash flows directly returned to token holders. The integration of Canton Network was also seen as a catalyst for unlocking the $8 trillion RWA market.

These narratives collectively built a valuation framework centered on “network adoption + future cash flows.” However, the KelpDAO incident shattered this internal assumption. When LayerZero’s infrastructure proved vulnerable in a real attack, “network adoption” shifted from a positive factor to a risk amplifier—the more applications, the wider the potential impact of a single point of failure. The expected “future cash flows” were also eroded by reputational damage from the security breach, as multiple protocols temporarily paused, reducing cross-chain traffic in the short term and affecting Stargate’s revenue and ZRO buyback scale.

The pricing logic of bridge tokens is undergoing a paradigm shift. Previously, the market tended to see cross-chain protocol tokens as “protocol governance + network usage” economic certificates, with value anchored to adoption scale and network effects. But repeated security incidents are forcing the market to redefine this asset class—bridge token value depends not only on protocol adoption but also on the protocol’s resilience in absorbing shocks, controlling contagion, and restoring confidence during security events.

In other words, the market is beginning to assign a previously overlooked pricing factor to bridge tokens: infrastructure risk premium. The size of this premium depends on the protocol’s security configuration flexibility, incident response speed, transparency of responsibility allocation, and ecosystem recovery capacity. The KelpDAO incident’s far greater price decline for ZRO compared to other DeFi tokens reflects the market’s rapid pricing of this new risk factor.

Industry Perspective: Systemic Fragility of Cross-Chain Infrastructure

Looking beyond a single incident to the industry level, the KelpDAO attack is not an isolated cross-chain bridge security failure. In recent years, cross-chain bridges have become one of the most frequent attack targets in crypto. The fundamental reason is that bridges are the essential gateways for value flow between different blockchains, inherently attracting high-value aggregation; at the same time, their security models involve multiple components—source chain, target chain, validator network, RPC nodes—any vulnerability can be exploited.

LayerZero’s modular security design—allowing applications to customize DVN configurations—aims to enhance flexibility but in practice leads to security level differentiation. Data shows that 47% of the 2,665 LayerZero-based OApp contracts adopt the 1/1 DVN configuration, indicating many developers choose the “default path” rather than the “optimal path,” partly due to higher operational costs and more complex deployment with multiple DVNs.

This “default insecure” ecosystem reflects a fundamental misalignment in the market expansion phase of cross-chain protocols—prioritizing easier integration over enforcing the highest security standards. The KelpDAO incident, costing $294 million, highlights the real market price of this strategic choice.

For the entire cross-chain interoperability sector, the long-term impact may include: accelerated standardization of security configurations, migration from single to multi-validator models, re-evaluation of insurance coverage for bridge tokens, and a systemic increase in user awareness of cross-chain asset risks.

Conclusion

The KelpDAO incident delivers not only a $294 million asset loss and a 22% single-day plunge in ZRO but also a collective reflection on the pricing of cross-chain infrastructure risks. When bridge tokens’ value depends not only on how many chains they connect and how much volume they process but also on their resilience and responsibility during security events, the entire valuation logic will undergo profound restructuring.

For LayerZero, the current challenge is not just fixing code but restoring trust. For the market, whether the systemic discount on bridge tokens is a short-term event-driven mispricing or a long-term structural shift in valuation will become clearer over the coming months, as security migration progresses, cross-chain traffic data accumulates, and ecosystem recovery unfolds.

As of April 22, 2026, Gate行情 data shows ZRO at $1.61, with a 24-hour trading volume of $1.04 million and a market cap of $405 million. The market continues to await the next move.