Security Incidents

北韓恐攻案升溫，7,100萬美金Aave凍結資產進入第三回合。原告改以TRIA法主張ETH屬北韓國家財產，強調詐欺而非竊盗以突破小偷不擁有贓物抗辯，同時挑戰Aave的standing與治理地位。DeFi United募資逾3.28億美元，基金充足以補償受影響用戶。案件或成DeFi法理與DAO治理的關鍵判例。

據 The Block 於 5 月 6 日報道，一名以化名「DB」起訴的匿名加密貨幣巨鯨週一對 Coinbase 及被指控的竊賊「John Doe」提起訴訟，指控 Coinbase 在其提供宣誓書證明自己為合法所有人後，仍拒絕歸還與 2024 年加密貨幣盜竊案相關的凍結 DAI 資金。

Attorneys for victims of three North Korea terrorism cases filed a 30-page response on Tuesday, reframing the April 18 Aave hack as fraud rather than theft. The distinction carries legal significance: characterizing the incident as fraud could grant the attackers legal title to the borrowed

According to The Block, Kelp DAO abandoned LayerZero for Chainlink's Cross-Chain Interoperability Protocol (CCIP) following the $292 million bridge exploit last month. A Chainlink representative confirmed Kelp DAO is the first major protocol to migrate away from LayerZero since the attack. On

According to Bryan Pellegrino, LayerZero Labs co-founder and CEO, most allegations against KelpDAO are unfounded. On May 6, Pellegrino stated that Kelp initially used the default MultiDVN or DeadDVN configuration but manually changed it to a 1/1 configuration on April 1, 2024, according to on-chain

據 Protos 於 5 月 5 日報道，Bitcoin Core 開發者在官方網站公開披露高危漏洞 CVE-2024-52911，該漏洞允許礦工透過挖掘特製區塊，遠端崩潰其他用戶的節點並在特定條件下執行程式碼。由於比特幣全節點升級為自願行為，目前估計仍有約 43% 的節點運行存在漏洞的舊版軟體。

According to Protos, Bitcoin Core developers recently disclosed a critical vulnerability (CVE-2024-52911) that affects versions 0.14.1 through 28.4, allowing miners to remotely crash nodes and execute arbitrary code by mining specially crafted blocks. Discovered in November 2024 by developer Cory

根據 AMM 基礎設施 Ekubo 於 5 月 6 日在 X 平台發布的官方公告，Ekubo 在 EVM 鏈上的 Swap 路由合約發生安全事件。Ekubo 確認，流動性提供者（LP）及 Starknet 均未受到本次事件影響；團隊正在調查事件範圍，並準備事後分析報告。

據 The Block 於 5 月 5 日報道，去中心化金融借貸協議 Kelp DAO 宣布棄用 LayerZero 作為跨鏈基礎設施提供商，改採 Chainlink 的跨鏈互通性協議（CCIP）；Kelp DAO 是「自 LayerZero 漏洞事件發生以來第一個放棄 LayerZero 的主要協議」。

根據 Drift Protocol 於 5 月 6 日在 X 平台發布的官方公告，Drift Protocol 正式推出針對 4 月 1 日黑客事件的用戶恢復計劃：每個受影響錢包將獲得「恢復代幣」（Recovery Token），每枚對應 1 美元的已驗證損失，作為對恢復池的按比例索賠憑證。

According to Kelp DAO's announcement on Tuesday, the protocol blamed LayerZero for approving a risky configuration that enabled a $292 million exploit on April 18. Kelp said LayerZero personnel approved a 1-of-1 verifier setup—relying on a single entity to validate cross-chain transactions—without w

According to Digital Asset, Do Kwon, founder of Terraform Labs, was sentenced to 15 years in prison by a U.S. federal judge on December 12, 2024, on fraud and money laundering charges. Kwon is expected to serve approximately six years before potential extradition to South Korea, following an

According to on-chain analysis platform Bubblemaps, MYSTERY token exhibited signs of concentrated control at launch, with the platform describing it as a "textbook scam." Bubblemaps disclosed that approximately 90 wallets accumulated roughly 90% of the token's supply at launch and have been

According to on-chain analyst Specter, Wasabi protocol attackers transferred approximately $5.9 million in stolen funds to Tornado Cash on May 5, completing a centralized coin-mixing operation. The funds follow a multi-stage complex transfer path involving previous breaches at KelpDAO and

According to Crypto ISAC announcement on Tuesday, Ripple is sharing internal intelligence on North Korea-linked threat actors with the crypto sector, including fraud-associated domains, wallet addresses, and indicators of compromise from recent hacking campaigns. The move follows the $280 million D

On May 4, 2026, on-chain investigator ZachXBT published a detailed report accusing the decentralized exchange aggregator Tokenlon of facilitating the movement of illicit funds tied to the Lazarus Group, the North Korean hacking syndicate linked to major crypto heists. According to ZachXBT's