Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
CFD
U.S. stock CFD derivatives
US Stocks
Access real US stocks and ETFs
HK Stocks
Trade quality Hong Kong-listed stocks
Stock Futures
High leverage, 24/7 trading
Tokenized Stocks
Backed by real stock assets
IPO Access
Unlock full access to global stock IPOs
GUSD
Mint GUSD for Treasury RWA yields
Stocks Activities
Trade Popular Stocks and Unlock Generous Airdrops
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
IPO Access
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Promotions
AI
Gate AI
Your all-in-one conversational AI partner
Gate AI Bot
Use Gate AI directly in your social App
GateClaw
Gate Blue Lobster, ready to go
Gate for AI Agent
AI infrastructure, Gate MCP, Skills, and CLI
Gate Skills Hub
10K+ Skills
From office tasks to trading, the all-in-one skill hub makes AI even more useful.
Greetings from Gate Square,
The controversy surrounding the $292 million rsETH bridge attack between Kelp DAO and LayerZero has taken on a new dimension. Kelp DAO has revealed that the 1-of-1 validator setup, previously cited as the cause of the attack, was personally approved by LayerZero personnel.
According to documents released by Kelp, the LayerZero team reviewed this configuration for 2.5 years and during eight separate integration meetings; they reported no security risks. In fact, screenshots show that LayerZero did not object to this setup.
LayerZero, in its post-incident report, argued that the protocol worked as intended and that the error stemmed from Kelp's failure to use its recommended multi-validator model. However, data pointed out by Kelp indicates that 47% of active LayerZero OApp contracts use the same 1-of-1 configuration, leaving over $4.5 billion in market value at risk.
The attack is reportedly being carried out by a hacker group with North Korean links, and 116,500 rsETH have been stolen. Following these developments, Kelp DAO decided to migrate its rsETH infrastructure from LayerZero's OFT standard to Chainlink's CCIP protocol. LayerZero, meanwhile, banned 1-of-1 setups and announced it will no longer sign messages for such configurations.
This case once again raises the question of who is responsible for security in DeFi.
When building a bridge, it's not enough to trust the architect; you must also track down the master who laid each stone.
⚠️Don't forget to mark stop-loss and manage risk properly.
👉NFA
👉DYOR
#GateSquareMayTradingShare
#GateSquare #CreatorCarnival
The controversy surrounding the $292 million rsETH bridge attack between Kelp DAO and LayerZero has taken on a new dimension. Kelp DAO has revealed that the 1-of-1 validator setup, previously cited as the cause of the attack, was personally approved by LayerZero personnel.
According to documents released by Kelp, the LayerZero team reviewed this configuration for 2.5 years and during eight separate integration meetings; they reported no security risks. In fact, screenshots show that LayerZero did not object to this setup.
LayerZero, in its post-incident report, argued that the protocol worked as intended and that the error stemmed from Kelp's failure to use its recommended multi-validator model. However, data pointed out by Kelp indicates that 47% of active LayerZero OApp contracts use the same 1-of-1 configuration, leaving over $4.5 billion in market value at risk.
The attack is reportedly being carried out by a hacker group with North Korean links, and 116,500 rsETH have been stolen. Following these developments, Kelp DAO decided to migrate its rsETH infrastructure from LayerZero's OFT standard to Chainlink's CCIP protocol. LayerZero, meanwhile, banned 1-of-1 setups and announced it will no longer sign messages for such configurations.
This case once again raises the question of who is responsible for security in DeFi.
When building a bridge, it's not enough to trust the architect; you must also track down the master who laid each stone.
⚠️Don't forget to mark stop-loss and manage risk properly.
👉NFA
👉DYOR
#GateSquareMayTradingShare
#GateSquare #CreatorCarnival