Aave Claws Back From $292M rsETH Exploit With $300M Coalition

The post Cross-Chain Protocol Gravity Bridge Suffers $5.4 Million Attack — Details appeared on BitcoinEthereumNews.com. Gravity Bridge, a Cosmos-native cross-chain protocol, was the target of a compromised-key attack, which led to the theft of roughly $5.4 million over the weekend. This latest security breach joins the growing list of exploits suffered in the decentralized finance (DeFi) space so far in 2026. Gravity Bridge Hack Traced To Signing Key Compromise: Investigator On Saturday, May 31st, blockchain sleuth Specter highlighted that Gravity Bridge might have been exploited through what he described as a signing key compromise. For context, a signing key compromise refers to the unauthorized disclosure or theft of a cryptographic key, allowing an attacker to then use it to decrypt sensitive information, forge digital signatures, or gain unauthorized access to systems and, as in this case, funds. The analyst disclosed that the loot included crypto assets worth about $5..4 million,

Gravity Bridge, a Cosmos-native cross-chain protocol, was the target of a compromised-key attack, which led to the theft of roughly $5.4 million over the weekend. This latest security breach joins the growing list of exploits suffered in the decentralized finance (DeFi) space so far in 2026. Gravity Bridge Hack Traced To Signing Key Compromise: Investigator On Saturday, May 31st, blockchain sleuth Specter highlighted that Gravity Bridge might have been exploited through what he described as a signing key compromise. For context, a signing key compromise refers to the unauthorized disclosure or theft of a cryptographic key, allowing an attacker to then use it to decrypt sensitive information, forge digital signatures, or gain unauthorized access to systems and, as in this case, funds. Related Reading: AAVE Price Plummets By 26%: $9 Billion Net Outflows Traced To Kelp DAO Hack The analyst disclosed that the loot included crypto assets worth about $5..4 million, including $4.3 million in

The post Aave Claws Back From $292M rsETH Exploit With $300M Coalition appeared on BitcoinEthereumNews.com. Aave’s post mortem details how a forged cross-chain message triggered a $292M rsETH exploit and how a $300M DeFi coalition restored full backing. The attacker was already gone by the time anyone realized the bridge had lied. On April 18, at 17:35 UTC, Kelp’s rsETH LayerZero V2 bridge accepted inbound nonce 308 on Ethereum while Unichain still sat at outbound nonce 307. No burn happened. 116,500 rsETH came out of the Ethereum-side adapter as if it had. The LayerZero verifier responsible for signing inbound messages on Ethereum was running on a one-of-one DVN setup. One signer. It was hit by an RPC-poisoning attack that warped its view of source-chain state. The verifier attested to a transaction that never occurred, per Aave’s post mortem published on X. The Borrow Play Nobody Saw Coming Within minutes, seven recipient addresses had the stolen tokens. 89,567 rsETH of it went into

The post Aave Claws Back From $292M rsETH Exploit With $300M Coalition appeared on BitcoinEthereumNews.com. Aave’s post mortem details how a forged cross-chain message triggered a $292M rsETH exploit and how a $300M DeFi coalition restored full backing. The attacker was already gone by the time anyone realized the bridge had lied. On April 18, at 17:35 UTC, Kelp’s rsETH LayerZero V2 bridge accepted inbound nonce 308 on Ethereum while Unichain still sat at outbound nonce 307. No burn happened. 116,500 rsETH came out of the Ethereum-side adapter as if it had. The LayerZero verifier responsible for signing inbound messages on Ethereum was running on a one-of-one DVN setup. One signer. It was hit by an RPC-poisoning attack that warped its view of source-chain state. The verifier attested to a transaction that never occurred, per Aave’s post mortem published on X. The Borrow Play Nobody Saw Coming Within minutes, seven recipient addresses had the stolen tokens. 89,567 rsETH of it went into

The post BlackRock accelerates crypto sale after dumping over $1.2 billion of these assets appeared on BitcoinEthereumNews.com. BlackRock has sharply increased its crypto ETF selling activity, recording more than $1.21 billion in combined Bitcoin (BTC) and Ethereum (ETH) fund outflows over the past week.  Data on spot crypto ETF flows show that BlackRock’s Bitcoin and Ethereum funds experienced sustained outflows over multiple trading sessions, with Bitcoin accounting for the vast majority of withdrawals.  The development comes as cryptocurrency markets face renewed volatility and profit-taking following earlier gains. The largest share of the outflows came from BlackRock’s iShares Bitcoin Trust (IBIT), which recorded net withdrawals totaling approximately $1.04 billion over the period. The heaviest single-day outflow occurred on May 27, when investors pulled $527.8 million from the fund. The selling continued on May 28 with another $177.9 million in withdrawals, followed by $68.2 mill

The post XRP Goes Beyond Payments: DeFi Collateral & Yield Use appeared on BitcoinEthereumNews.com. XRP’s Utility Goes Beyond Payments as Flare Co-founder Highlights Yield-Generating Opportunities  In a special edition of the XRP in One Minute segment, Flare Network co-founder Hugo Philion challenged the usual perception of XRP, arguing that its role in crypto is evolving far beyond payments. For years, XRP has been known primarily as a payments-focused digital asset, valued for its speed, low transaction costs, and role in cross-border transfers. But according to Philion, XRP’s future extends far beyond payments. The Flare executive argues that XRP can evolve into a productive collateral asset capable of unlocking yield-generating opportunities across decentralized finance (DeFi).  In other words, instead of simply holding XRP and waiting for price appreciation, investors can potentially put their assets to work while maintaining exposure to the token. The core of this shift sits with

The post Regulated Perps vs DeFi: The New U.S. Challenger appeared on BitcoinEthereumNews.com. A regulated U.S. exchange just got the nod to list a bitcoin perpetual. That single sentence, unthinkable a few years ago, resets the race between onchain DEXs and compliant venues. On May 29, 2026, the CFTC approved KalshiEX’s BTCPERP—formally clearing a bitcoin-referenced perpetual futures product to trade under U.S. oversight (CFTC press release (Release No. 9240-26)). Hours later, the agency outlined how it will treat perpetuals going forward and gave clarity on how U.S. firms can route to offshore liquidity pools under conditions. For DeFi perpetual DEXs, a new competitor has arrived—onshore, regulated, and open 24/7. The Big Picture Editor’s note: In Q2 2026 I spent weeks comparing onshore pricing to offshore and DeFi perps during the CFTC’s late‑May actions. Dealers I speak with welcomed the case‑by‑case framework because it clarifies what they must prove in risk reviews, and a few FCM

The post Alephium Bridge Loses $815K to Forged Guardian Messages, Not Stolen Keys appeared on BitcoinEthereumNews.com. Alephium’s Wormhole-fork TokenBridge was drained on Ethereum and BNB Chain in roughly seven minutes after an off-chain backend flaw let fraudulent messages slip past its four-guardian network, the team said in a public correction. Alephium, a proof-of-work Layer 1 that runs a private fork of the Wormhole bridge, lost about $815,000 across Ethereum and BNB Chain on Friday after an attacker pushed forged messages through the bridge backend and out the other side as legitimate-looking transfers, according to the team. Alephium has shut the bridge down and said no new transactions can be initiated. The attacker drained 200,967 USDT, 17,594 USDC, 5.18 WETH and 0.335 WBTC on Ethereum, plus 36,750 USDT and 24.386 WBNB on BNB Chain, per Alephium’s accounting, and minted 13.76 million wrapped ALPH on Ethereum with no corresponding ALPH locked on the Alephium chain. The full seq