layer

Messari's latest Pulse report provides an in-depth analysis of the early implementation progress of the Bitget AI trading system. The report points out that Bitget has built a four-layer AI product architecture that includes GetAgent (market analysis), GetClaw (autonomous execution), Agent Hub (developer access), and Gracy AI (strategy interaction). Data shows that Gracy AI attracted over 460,000 users just 11 days after its launch, generating more than 2.6 million replies and achieving an exposure of 390 million; GetAgent has surpassed 450,000 registered users, achieving over 100 million exposures during its early invitation testing phase and accumulating more than 25,000 waiting users.Messari emphasizes the infrastructure capabilities of Agent Hub in the report, noting that Bitget is currently the only trading platform that supports a complete calling system for MCP Server, REST/WebSocket API, Skills, and CLI. Currently, Agent Hub has integrated 5 analytical AI Skills and over 15 data tools, covering macro, technical, sentiment, and intelligence analysis comprehensively. The execution layer, GetClaw, builds a risk control defense line through sub-account isolation, sandbox drills, and funding limits, and has now integrated with Telegram, with plans to expand to Discord and app platforms in the future.Bitget CEO Gracy Chen stated that AI is becoming a core component of modern trading infrastructure, and early data indicates that users increasingly expect a complete integration of analysis, execution, and strategy within a single platform. Bitget is committed to lowering the professional trading threshold through AI technology, providing institutional-level trading experiences and decision support for 150 million users worldwide.

According to Onchain Lens monitoring, a wallet associated with the LayerZero team deposited 1 million ZRO into Binance, worth 1.43 million dollars. The wallet still holds 29 million ZRO, worth 41.34 million dollars, and may continue to deposit.

Tether announced the launch of the Mining Development Kit (MDK). MDK is an open-source, full-stack development framework designed to provide Bitcoin miners and developers with unified control over their entire infrastructure stack.MDK adopts an open modular architecture and Agnostic interface, combining a JavaScript backend SDK and a React UI component library to replace the closed proprietary systems that have led to fragmented mining operations over the years. The framework is suitable for all users, from home miners to gigawatt-scale mining farms, supporting Windows, macOS, and Linux, and capable of avoiding vendor lock-in. MDK includes a standalone core layer (MDK Core) and a UI development kit, enabling rapid development of operational dashboards, automated workflows, mining pool management tools, and analytics pipelines.Tether CEO Paolo Ardoino stated that MDK will provide the infrastructure support for the next generation of Bitcoin mining focused on automation and optimization. Previously, Tether had open-sourced its mining operating system MOS.

According to Theblock, a new academic paper concluded that after analyzing all transactions on Polymarket from 2023 to 2025, only 3.14% of accounts were defined as "skilled winners," who were able to consistently and accurately predict short-term price trends and final outcomes. These skilled traders, along with market makers, contributed to over 30% of the platform's total revenue.The paper also pointed out that only 12% of winners belonged to the high-level trader group, while about 60% of "lucky winners" turned into losers in another data sample test. Accounts classified as unlucky or technically poor accounted for 67% of the total, bearing all of the platform's total losses.The paper was co-authored by Roberto Gómez-Cram, Yunhan Guo, Howard Kung from the London Business School, and Theis Ingerslev Jensen from Yale University, covering 1.72 million accounts and over 210,000 markets, with a total trading volume of approximately $13.76 billion.

According to on-chain data, the Bitlayer team's multi-signature address (0x8E9E...c641) is conducting token cross-chain and aggregation operations. Transaction records show that this address transferred BTR tokens from the ETH chain to the BSC chain, and in two transactions (500,000 and 1,500,000 respectively), a total of 20 million BTR was ultimately transferred to the Binance Alpha wallet address.According to CMC data, the current circulating supply of BTR is 333.28 million, and the total amount transferred to Binance from this address accounts for approximately 6% of its total circulating supply. BTR is currently priced at $0.03385, with a 24-hour increase of 6.24%, and its circulating market capitalization is approximately $11.28 million.

Ethereum developer Tom Lehman has released a draft proposal for EIP-8182, which aims to make private transactions a native feature of Ethereum by introducing shared privacy pools, a fixed address system contract, and zero-knowledge proof verification precompiles at the Ethereum protocol layer.The proposal states that the solution will be implemented through a hard fork upgrade, without an administrator key, governance tokens, or on-chain upgrade mechanisms, with the goal of addressing the issues of decentralization and inconsistent trust models in privacy applications. As designed, users can make private transactions to any Ethereum address or ENS name using existing wallets, and it supports atomic "de-sensitization - interaction - re-privatization" processes.

Ethena officially announced that the LayerZero cross-chain bridge functionality for sUSDe and USDe has been relaunched on all chains. To enhance security, Ethena has upgraded the decentralized verification network (DVN) configuration on each chain from 2/2 to 4/4, while maintaining the existing rate limit of $10 million per hour. The official statement indicated that further updates will be provided as necessary.

ether.fi posted on platform X that weETH based on the LayerZero cross-chain bridge has now been restored on all chains, and liquidity minting and redemption functions have been enabled.In terms of security, the ether team has increased the number of DVNs (Decentralized Verification Networks) from 2 to 4 and implemented stricter rate limiting mechanisms to further enhance system security. Additionally, related services will gradually resume under the guidance of security partners, and more updates will be released in the future.

ether.fi posted on platform X that, guided by security partners, it will restore the LayerZero bridging functionality for weETH and eETH within the next 24 hours.ether.fi previously confirmed that its Liquid treasury was not directly exposed to the Kelp rsETH event risk, but decided to suspend the LayerZero cross-chain bridging functionality for weETH and eETH as a precautionary measure until the root cause of the Kelp rsETH event is clarified. Meanwhile, for Liquid (ETH, BTC, USD), sETHFI, and eBTC products, the relevant Teller contracts have been suspended to block the LayerZero OFT bridging path, and the deposit and withdrawal functions for the related assets have also been suspended. They are currently working closely with security partners.

ChainCatcher reported live that Adeniyi Abiodun, co-founder and Chief Product Officer of Mysten Labs, delivered a keynote speech at the 2026 Hong Kong Web3 Carnival. He stated that the core team members come from Facebook and were responsible for launching the global payment network Libra, aiming to make fund transfers as simple as sending messages. He announced that Sui will be the first high-speed public blockchain to achieve zero transaction fees for transfers across the network, regardless of the transfer amount ranging from $0.0005 to $1 billion, covering all stablecoins such as USDC, USDT, and Sui Dollar.In terms of privacy, Sui will provide bank-grade on-chain privacy, utilizing advanced cryptography to ensure that transaction history and balances are not visible to third parties, while fully compliant with regulatory requirements. Regarding yields, he introduced the Sui Dollar launched in collaboration with Stripe, which generates approximately 3.5% returns that will be directly reinvested into the network ecosystem and users, rather than flowing to intermediaries.He also announced the launch of the Bitcoin DeFi protocol Hashi aimed at institutions, allowing sovereign wealth funds, hedge funds, and ETF holders to deploy Bitcoin into DeFi for yields without triggering taxable events, supported by legal opinions from top U.S. law firm Fenwick & West. Additionally, Sui's on-chain deep order book DeepBook supports large transactions with extremely low slippage for instant on-chain exchanges between assets such as BTC, gold, USD, and EUR.In the AI agent economy, he pointed out that Stripe estimates a need for processing capacity of 1 billion transactions per second in the future, while Sui employs a horizontally scalable architecture similar to that of Google Search and Facebook infrastructure, capable of scaling on demand to millions or even tens of millions of TPS. The full-stack atomic composability provided by Sui is its core differentiated advantage, allowing agents to execute multiple cross-application transactions simultaneously and settle them in one go, which cannot be achieved on AWS, Google, or any existing Web3 platform. He also announced a partnership with RedotPay, enabling users to spend Sui Dollars at over 130 million merchants worldwide and positioning Sui as an alternative to SWIFT.

Kelp DAO officially stated in a post on X regarding the theft incident that the cause of the theft was the compromise of two RPC nodes hosted by LayerZero, while a third RPC node suffered a DDoS attack. This was an attack targeting LayerZero's infrastructure, and Kelp's own system was not involved in the construction or operation of that infrastructure.The 1/1 DVN configuration is the scheme recorded in LayerZero's documentation and is the default setting for all new OFT deployments. Kelp has been operating on LayerZero's infrastructure since January 2024 and has maintained open communication with the LayerZero team. During Kelp's expansion to Layer2, the DVN configuration issue was discussed, and at that time, the default configuration was explicitly confirmed to be appropriate. Kelp's current top priority is to safeguard user interests and prevent risks from spreading within the DeFi ecosystem. The team is collaborating with various parties within the ecosystem to analyze the impact, seek support, and explore all possible mitigation solutions.

According to CoinDesk, the liquidity re-staking protocol Kelp DAO has raised objections to LayerZero's investigation report regarding the previous $290 million rsETH bridge attack incident.Kelp DAO claims that the single-validator (1/1) configuration that led to this attack was not a choice made in disregard of recommendations, but rather the default setting in LayerZero's official guidelines, and the validator network (DVN) exploited by the attacker is part of LayerZero's own infrastructure.The attack resulted in the theft of 116,500 rsETH, worth approximately $290 million. Security researchers pointed out that LayerZero's publicly deployed code defaults to a single-source validation configuration across networks such as Ethereum, Binance Smart Chain, Polygon, Arbitrum, and Optimism.LayerZero subsequently responded that it will stop signing messages for any applications using a single-validator setup and will enforce a security migration.

LayerZero Labs released an incident report stating that KelpDAO suffered an attack resulting in a loss of approximately $290 million. Preliminary assessments indicate that the attacker is the Lazarus Group, which has ties to North Korea (more specifically, TraderTraitor). The attack was executed by poisoning the downstream RPC infrastructure relied upon by its decentralized verification network (DVN). The attacker controlled some RPC nodes and, in conjunction with a DDoS attack, induced the system to switch to malicious nodes, thereby forging cross-chain transactions.All affected RPC nodes have been taken offline and replaced, and the DVN has now resumed operation. LayerZero emphasized that this incident was limited to the rsETH application configuration of KelpDAO and did not affect other assets or applications. The reason is that KelpDAO was using a single DVN (1/1) architecture at the time and did not utilize the multi-DVN redundancy mechanism that is officially recommended for long-term use, resulting in a lack of independent verification nodes to identify forged messages.LayerZero pointed out that there were no vulnerabilities in its protocol itself, and applications with multi-DVN configurations were not affected, meaning there is no contagious risk in the system. LayerZero stated that it will urge all projects using single DVN configurations to migrate to multi-DVN architectures as soon as possible and has suspended providing signature and verification services for 1/1 configuration applications. Meanwhile, the company is cooperating with global law enforcement agencies to investigate and assist industry partners in tracking the stolen funds. LayerZero noted that this incident highlights the value of modular security architecture and also reminds the industry to pay attention to the potential security risks of RPC verification links.

According to Ember Monitoring, LayerZero's "strategic partner" wallet distributed ZRO unlocks to 52 addresses half an hour ago, with a total of 1.21 million ZRO (approximately 1.97 million USD) distributed, of which the largest transaction was 855,000 ZRO (approximately 1.42 million USD) transferred to Binance.LayerZero, as the cross-chain bridge exploited by hackers in yesterday's rsETH vulnerability incident, saw its token ZRO drop by 18% yesterday.

Curve Finance announced on platform X that due to the LayerZero infrastructure being attacked in the rsETH hacking incident, it has decided to suspend Curve's LayerZero infrastructure as a precautionary measure until further understanding of the root cause of the incident. This action will affect:CRV bridging from the following chains: BNB, Sonic, Avalanche, Fantom, Etherlink, Kava (other chains will still use native bridging);The fast bridging of crvUSD (slow bridging on L2 will still be available for normal use).

etherFi posted on platform X that its Liquid treasury is temporarily not directly exposed to the Kelp rsETH event risk, but as a precautionary measure, it has suspended the LayerZero cross-chain bridging functionality for weETH and eETH until the root cause of the Kelp rs ETH event is clarified. Meanwhile, for Liquid (ETH, BTC, USD), sETHFI, and eBTC products, the relevant Teller contracts have been suspended to block the LayerZero OFT bridging path, and the deposit and withdrawal functions for the related assets have also been suspended. They are currently working closely with security partners and will provide timely updates once more details are confirmed.

LayerZero posted on platform X that it is aware of the rsETH vulnerability incident and has been actively working with the KelpDAO team on handling and remediation since the incident occurred, while continuing to monitor the situation.LayerZero stated that, aside from the rsETH-related incident, other applications remain secure. Regarding the root cause of the incident, LayerZero is collaborating with SEAL_Org and others to investigate and has indicated that it will release a complete post-incident analysis report in conjunction with KelpDAO once all information is gathered.

The Solana ecosystem liquidity protocol Kamino stated on platform X that its platform and users have not been affected by the current Ethereum rsETH incident. However, out of caution, it has suspended all core market interactions related to LayerZero tokens (USDS, LBTC, FBTC). The related reserve assets have entered a "reduce-only mode," allowing users to withdraw and repay debts, but deposit and lending functions have been temporarily closed.Kamino added that it is in communication with the LayerZero team and will notify users as soon as the related reserves return to normal operations. These measures are all part of proactive risk control, and the platform and user funds have not been affected.

Euler Labs announced on the X platform that as a precaution, the LayerZero OFT cross-chain bridge for EUL is temporarily suspended during the investigation into the cause of the rsETH incident, and emphasized that EUL has no exposure to this rsETH incident. An update will be released after the cross-chain functionality is restored.