Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Promotions
AI
Gate AI
Your all-in-one conversational AI partner
Gate AI Bot
Use Gate AI directly in your social App
GateClaw
Gate Blue Lobster, ready to go
Gate for AI Agent
AI infrastructure, Gate MCP, Skills, and CLI
Gate Skills Hub
10K+ Skills
From office tasks to trading, the all-in-one skill hub makes AI even more useful.
GateRouter
Smartly choose from 40+ AI models, with 0% extra fees
#LayerZeroCEOAdmitsProtocolFlaws
April–May 2026 exposed major cracks in the cross-chain ecosystem. LayerZero CEO Bryan Pellegrino flagged a critical flaw in the Across Protocol token contract, while the same period saw the $292M KelpDAO hack. The community response was clear: simply adding more validators is not enough.
According to Pellegrino, a sensitive function in the ERC20 implementation was mistakenly left public, allowing the contract owner to withdraw tokens from any wallet and even set balances to zero. On top of that, unlimited minting rights created a permanent vulnerability. The proposed fix: move ownership to an immutable smart contract and disable mint/burn functions entirely.
Meanwhile, the KelpDAO exploit triggered a debate over responsibility. LayerZero labeled it an infrastructure attack, pointing to KelpDAO’s use of a 1-of-1 DVN setup. But critics argue that weak default configurations are the real issue. With nearly 47% of OApps still relying on single DVN setups, over $4.5B remains exposed to similar risks.
This highlights a deeper structural problem: modular security only works if default settings are robust. Otherwise, projects may unknowingly inherit critical vulnerabilities.
Market impact followed quickly. ZRO dropped around 20%, confidence weakened, and bridge security is now front and center across DeFi discussions.
The takeaway is simple: cross-chain security cannot rely on assumptions. Industry-wide audits, stronger standards, and full transparency are no longer optional—they are essential.
#GateSquareMayTradingShare
#DeFiSecurity
#CryptoRisk
LayerZero CEO Confession: Protocol Vulnerabilities and After $290M Hack
The cross-chain world was shaken in April-May 2026. LayerZero CEO Bryan Pellegrino revealed a critical flaw in the Across Protocol token contract. The same week, the $292 million KelpDAO hack occurred. The community rose up: “Just increasing the number of validators isn’t enough.”
1. CEO Confession: “Red Alert” in Token Contract
Pellegrino addressed the Across team: “You accidentally left a function that should be private in your ERC20 implementation public. The contract owner can withdraw tokens from any wallet and set the balance to zero. Also, Across and UMA contracts have unlimited minting rights.”
Suggested solution: Transfer contract ownership to an immutable smart contract. Disable mint/burn rights. Because this is a permanent vulnerability. Pellegrino: “If there’s a bug bounty, contact the LayerZero team.”
2. $292M KelpDAO Disaster: Responsibility Dispute
Around April 20, KelpDAO’s LayerZero bridge was drained: 116,500 rsETH, $292M stolen. Lazarus Group suspected.
LayerZero: “The attack was not on our protocol, but an infrastructure attack. KelpDAO used a 1-of-1 DVN, so it’s an isolated incident.” In other words, they trusted a single validator network; our recommendation was multi-DVN.
The community is angry: “Your RPC infrastructure was hacked, you can’t just blame KelpDAO.” 47% of OApp still uses 1-of-1 DVN. At risk is $4.5 billion.
3. Structural Issue: DVN Architecture
LayerZero claims “modular security”: Applications choose their own DVNs. But if default settings are weak, projects unknowingly entrust a single validator. This happened with KelpDAO too. Attackers poisoned RPCs and approved fake messages.
Stani Kulechov warned: “Bridge exploits are an existential threat to DeFi. After Ronin, Poly Network, Nomad, now LayerZero-based bridges are in the spotlight.”
Market Impact • ZRO Token: Fell 20% after the hack, ranging from $1.47 to $2.28. Despite a 5.18% jump in the last 3 days, the trend remains downward. • TVL Risk: $4.5B+ OApp operates with 1-of-1 DVN. If similar attacks recur, contagion risk is high. • Trust Crisis: “Zero contagion” was claimed, but the community is not convinced. Bridge security is now the top priority in DeFi.
Summary: LayerZero says “applications choose their own security,” but defaults put billions at risk. The CEO’s disclosure about Across was well-intentioned, but the “responsibility is not ours” stance after KelpDAO drew criticism. Protocol-level security cannot be solved simply by adding more validators. Industry-wide audits, standards, and transparency are essential.
#GateSquareMayTradingShare
#GateSquareMayTradingShare
#LayerZeroCEOAdmitsProtocolFlaws