RE: Telegram21 Apr 2026 16:40
COURTESY of James on Telegram
"Anyone following the bridge hacks this week — Hyperbridge April 13th, KelpDAO April 18th. Combined $292M gone. Both exploits worked the same way. Forged cross-chain messages bypassing verification. Different technical vectors, same concept. Minting unbacked assets out of thin air.
KelpDAO used a single verifier on their bridge. One point of failure. Attributed to Lazarus who poisoned the RPC nodes, DDoS’d the backups and the rest is history.
Hard not to think about Spacewalk. It doesn’t pass messages and trust verification. It requires collateral to exist on-chain before anything moves. You can’t forge a Spacewalk transaction because there’s nothing to forge. The collateral either exists and is locked or the bridge doesn’t execute. The attack surface these exploits keep targeting simply doesn’t exist here.
Three bridge hacks in 18 days. Spacewalk untouched. That’s not luck, that’s architecture! 🍻 Team 🙌🏻 - blue streak cleaner wrasse signing off."
That's his longest recent post but he's put out lots more. Top man.Really useful to be on Telegram.