2026-07-12 15:40 UTC
Cross-chain bridges lost ~2B USD in 2022 alone. Every major hack lived in the same place: the attestation layer that decides a deposit really happened. Ronin (stolen validator keys), Wormhole (forged guardian signature via unchecked account), Nomad (0x00 trusted root looted by hundreds), BNB Token Hub (forged IAVL Merkle proof). New issue breaks down all five. https://www.kayssel.com/newsletter/issue-58/
#InfoSec #CyberSecurity #Web3 #SmartContracts #BugBounty #DeFi
Replies (1)
-
@hannaB@social.vir.group 2026-07-12 21:57
@rsgbengi@infosec.exchange You think the attestation layer itself is the root cause, or is it more that teams keep implementing it with known weak points like single-signer setups?