Blockchain trust structure collapses, a major accident involving 430 billion won occurs.
2026-04-21
A shock has hit the cross-chain ecosystem. In light of the recent outflow of approximately 43 trillion won from Kelp DAO and LayerZero, the project Union has sounded an alarm, pointing out a fundamental design flaw. Union diagnosed that this incident did not stem from a simple technical error, but rather from the structural limitations of the trust-based architecture that currently supports blockchain interoperability. This is expected to be recorded as a case that starkly reveals a core vulnerability inherent to the entire industry.
The direct cause of the incident is analyzed to be a combination of factors: a single-signature method multisig, manipulated RPC nodes, and a DDoS attack. This resulted in the illegal withdrawal of 116,500 rsETH via a bridge. Experts point out that the problem lies in the very way the system was designed, which is more fundamental than a hack or key leak. They argue that the current model, which relies on off-chain infrastructure or a small number of validators, is inherently vulnerable to social engineering attacks or external intrusions.
As an alternative, Union is actively proposing a 'consensus verification' model. This method does not blindly trust intermediary infrastructure; instead, the receiving chain goes through a process of directly verifying the block headers signed by the validators of the sending chain. It is explained that this allows for the fundamental verification of data authenticity. However, this method encounters a new barrier: the enormous gas costs incurred because all data must be recorded on the blockchain. Union stated that to solve this problem, it has built a new verification structure with improved efficiency by introducing a zero-knowledge proof circuit called 'Galois'.
Union appealed, using this incident as an opportunity, that industry-wide collaboration is urgently needed. In particular, it is seeking to build a 'decentralized verification network' through collaboration with major protocols like LayerZero, and has reaffirmed its willingness to provide the necessary technical support. Their core message is that, given that attackers have already precisely identified the vulnerabilities of the existing trust model, a fundamental architectural shift is needed rather than partial patches. Union plans to consistently share related research results and progress, and work towards creating a safer cross-chain ecosystem.