# bridge exploit — X 热门讨论 (2026-09-22 23:42 UTC)

## @AikidoSecurity (Aikido) · 09-22 13:57 · ♥21 ↻3 💬3 Introducing Aikido Altar: the model that makes sovereign security intelligence possible https://x.com/AikidoSecurity/status/2102396852092256340

## @EuleKrypto (KryptoEule) · 09-22 14:10 · ♥21 ↻0 💬1 🚨 Shai gegen Kasplex: "Genau davor habe ich gewarnt"

Shai Wyborski sieht den aktuellen Kasplex/KRC 20 Exploit als Bestätigung seiner jahrelangen Kritik. Sein Kernproblem: KRC 20 Transfers werden nicht vollständig durch den Kaspa Konsens selbst erzwungen, sondern von einem Off Chain Indexer interpretiert. Genau dort versagte jetzt die Signaturprüfung: Ein Angreifer konnte rund 186 Mio. ZEAL und 54,4 Mrd. NACHO bewegen, ohne den Private Key der Bridge Wallet zu besitzen, und anschließend Liquiditätspools leeren. Kaspa L1, KAS und die Seeds der Nutzer wurden dabei nicht gehackt.

Warum Shai so sauer ist, ist auch persönlich: Laut seiner eigenen Darstellung warnte er KEF/Kasplex bereits lange vor dem Mainnet Start vor genau solchen Trust Problemen, bot sogar kostenlos Hilfe an und fühlte sich anschließend ignoriert und öffentlich angegriffen, nachdem er seine Kritik öffentlich machte. Ob seine Vorwürfe über gekürzte Finanzierung und eine gezielte Kampagne gegen ihn so zutreffen, kann ich unabhängig nicht bestätigen. Technisch ist aber wichtig: Der jetzige Vorfall zeigt tatsächlich ein reales Problem der Indexer Abhängigkeit, allerdings war es nach bisherigem Stand kein "bösartiger Indexer", sondern eine Schwachstelle in der Indexer-Logik selbst. Für Shai lautet die Botschaft deshalb: "Das war kein FUD, genau dieses Vertrauen in Off Chain Logik war meine Warnung." > 引用 @DesheShai: $kas When I made the last post about @kasplex's huge screw-up, I was just like "yeah, I knew they will screw it up". But as I read the details, I'm kinda amazed to see how this is exactly what I was warning about.

Recall: the shitstorm between me and KEF started when I raised a flag about their trust model. I claimed that without resolving the trust issues, it would be reckless to launch the mainnet.

Before making the public announcement, I insisted in closed conversations that they resolve it and even offered my help for free!

After months of them ignoring me, I told them that I would go public with this, and the next thing I knew: KEF cut my funding and started a mass slander campaign against me. Which a lot of people in the Kaspa fanbase followed without hesitation, sweeping along "upstanding community members" like Christian Ludwig and Christopher "Wolfie" Wolf, and of course, Michael Sutton and Yonatan Sompolinsky, who gladly participated in libeling me to make the community complacent about KEF's recklessness (though I reckon only Ludwig and Sompolinsky were willfully in on it, and the other two were manipulated).

So instead of the professional discussion about security I tried to hold, each time I tried to be critical of KEF, I found most of my energy wasted defending my integrity to people who didn't even bother to read the details. Naturally, I just gave up at some point. I was tired of trying to help and only getting abused in return.

About a year and a half later, my warnings materialized exactly as I warned in my initial post. We've seen an initial trickle in the form of KEF/Kurve robbing Kaspa users with exorbitant fees that weren't sufficiently disclosed. And now, lo and behold, just as I warned, a rogue indexer drained wallets.

Junni Ho from KEF kept downplaying my warnings and tried to soothe the community by convincing them I'm latching onto non-issues out of personal pettiness. Well, if you want evidence that what I insisted on actually matters, here it is. Unfortunately, in the form of real money stolen from real people.

I don't expect any apologies from people who thought my insistence on facing constant abuse was out of spite, and not out of concern. It is what it is.

Below is the initial post, the alleged "declaration of war". (Notice, in particular, Michael Sutton rushing to Kasplex's defense.) Reading it today, the only thing I regret is the apologetic tone. I was trying to be diplomatic. What a fool I have been. https://x.com/EuleKrypto/status/2102400269875023935