The $292 Million Kelp DAO Breach Highlights the Vulnerability of Crypto Bridges

The recent $292 million KelpDAO breach is the latest in a string of crypto bridge hacks, emphasizing the weaknesses in the systems designed to connect blockchains. The incident involved KelpDAO's use of LayerZero's cross-chain messaging system, a widely used infrastructure for transferring data and assets between blockchains. Crypto bridges are intended to enable the seamless transfer of assets between different blockchains, but they have consistently proven to be vulnerable points, resulting in the loss of billions of dollars over the past few years. According to crypto ecosystem leaders, the problem is not solely due to poor coding or careless mistakes, but rather a fundamental issue with how bridges are constructed. The core problem lies in the fact that bridges rely on intermediaries to verify transactions, rather than independently verifying the truth. This creates a risk, as seen in the Kelp DAO-related breach, where attackers targeted the data feeding into the bridge. Experts argue that bridge hacks often appear different on the surface but are symptoms of a deeper issue - the design of the systems themselves. The process of using bridges seems simple to users, but it involves a complex process of locking tokens on the original blockchain, confirming the lock, and then sending a message to the second blockchain to issue new tokens. However, this process relies on trusting the sender of the message, and if attackers compromise the system, they can send false messages and create unbacked tokens. Given the frequency of bridge failures, it is surprising that the industry has not fixed them. Part of the reason lies in the prioritization of launching quickly and growing users over security. Building secure systems requires time and money, which many DeFi projects lack. Moreover, the addition of new blockchain integrations increases complexity and assumptions, making it challenging to maintain security. Bridge hacks can have far-reaching consequences, as compromised assets are used across various protocols and strategies, leading to contagion. To make bridges safer, experts recommend removing single points of failure by relying on independent data sources and implementing hardware protections and better monitoring. Some developers are working on designs that verify data directly using cryptography, eliminating the need for intermediaries. Ultimately, a fundamental shift in the design of crypto bridges is necessary to address the underlying issues and prevent future breaches.