# bridge exploit — X 热门讨论 (2026-10-08 14:04 UTC)
## @0xchainink (Chain INK) · 10-08 13:08 · ♥31 ↻9 💬4 $CKB : Review 📜
What if the signature scheme Vitalik Buterin spent this week arguing crypto should move toward had already been sitting on another chain for a year?
Meet Nervos CKB, a proof-of-work Layer 1 where SPHINCS+ hash-based locks have been live as an option since late 2025. Its RGB++ protocol binds Bitcoin UTXOs without a bridge, and its Fiber payment layer just cleared every milestone on its build.
Let's explore the chain that keeps being early. 👇
⚪ CKB at a Glance
Marketplace Insight: CKB occupies an awkward and interesting position. The engineering is genuinely ahead of the market's attention, with a Bitcoin-native asset protocol that needs no bridge, a payment-channel layer doing atomic swaps with Lightning, and post-quantum locks that were deployed before the current debate about them started.
The token tells a different story, down 69% on the year and sitting near a market cap most people would class as microcap. The all-time high from March 2021 is now a distant number. What the past month shows is a project shipping steadily on Fiber and tooling while the L1 itself stayed deliberately still.
⚪ Mission
Nervos CKB exists to be the layer that stores and verifies, not the layer that executes. The architecture separates concerns on purpose: CKB handles state, security, and settlement through its Cell Model, while computation happens above it. The longer-term bet is that Bitcoin will need an asset and payments layer that does not require trusting a bridge, and that a proof-of-work chain with a generalised UTXO design is the honest way to build one.
🔵 A Brief History
Nervos launched its mainnet in November 2019, raising around $72 million across its token sales, with a proof-of-work chain running the Eaglesong hash function and a 25-year primary issuance halving schedule. The Cell Model, a generalisation of Bitcoin's UTXO design capable of holding arbitrary state, was the core architectural claim from the start. The chain spent its early years relatively quiet.
The turn came with RGB++, which binds asset issuance and ownership to Bitcoin UTXOs through isomorphic mapping, letting assets settle against Bitcoin without a bridge contract holding custody. That removed the single largest attack surface in cross-chain design, which matters given the project's own history.
The security record is where the honest reading gets uncomfortable. Force Bridge, the cross-chain bridge infrastructure, suffered exploits that cost the ecosystem real money, including a $3.9 million incident in June 2025 that drew a warning from DAXA, the South Korean exchange consortium. The response was architectural: RGB++ exists partly because bridges keep failing, and the project moved toward a design that does not need one.
CKB Edition Meepo activated on mainnet on 1 July 2025 at epoch 12,293, and remains the current ruleset. Late 2025 brought the quantum-resistant lock work, deploying an optional SPHINCS+ lock script on mainnet. Governance restructured when CKBA, a Swiss Verein, replaced the Foundation as the coordination body, with the chain itself remaining permissionless proof-of-work.
The past month has been a Fiber month. Version 0.9.1 landed on 11 September with force-close settlement fixes, on-chain TLC reconciliation using verified settlement snapshots, configurable peer-message rate limits, and improved funding-failure diagnostics. Version 0.10.0-rc1 followed on 25 September with backup-RPC authorization fixes. Fiber Studio filed its completion report with all milestones done and signed builds for all three desktop platforms.
Node v0.210.0 shipped 17 September carrying dependency and security updates with no protocol change, alongside CKB-VM v0.24.15 and a transaction-pool architecture review.
On the ecosystem side, the Gone in 60ms Fiber infrastructure hackathon returned results, with Fiber Forge taking a category and FiberNuts, a Cashu ecash implementation backed by Fiber RUSD, placing first in another. CKB Off-Chain Aba ran in Abia State, Nigeria on 3 October with sessions on the Cell Model, RGB++, and Fiber, and a Vietnam meetup followed on 8 October. Dular wrapped a Fiber payments pilot with around 30 users in Kenya.
Not everything went up. UTXOSwap announced it is shutting down on 10 to 11 October, with liquidity providers told to withdraw before 16:00 UTC on the 10th. CKBA does not operate it and only amplified the notice, but a DEX closing is a real signal about ecosystem depth.
🔵 Ecosystem Narrative
The through-line across the past month is Bitcoin-adjacent payments, built out while the base layer stayed still.
➛ The Cell Model. A generalisation of Bitcoin's UTXO design where each cell holds arbitrary data and a lock script, giving the chain programmable state without abandoning the UTXO security model.
➛ RGB++. Asset issuance and ownership bound to Bitcoin UTXOs through isomorphic mapping, with no bridge contract and no wrapped token holding custody between the two chains.
➛ Fiber Network. Payment channels on CKB with atomic swaps into Bitcoin Lightning through the Cross-Chain Hub, shipped 18 August. Multi-tenant hosted LSP for mobile wallets, Loop In and Out, and full payment-hash settlement remain in progress.
➛ SPHINCS+ locks. Optional hash-based post-quantum lock scripts live on mainnet since the late 2025 quantum-resistant lock work, the same signature family now being pushed as the conservative path for Ethereum's lean roadmap.
➛ Mobile and tooling. Pocket Node Android v1.8.4 on Google Play with the iOS build verified on hardware at the M1 stage, Khie merged as a P2P wallet-connect protocol, Omiga v1.2.0 expanding on-chain asset management with CCC wallet integration, and CKB Script Port experimenting with moving synced script state between light clients.
➛ Real-world pilots. Dular's Kenya payments pilot, Blackbox POS adding a receive-only Bitcoin rail where keys never touch the device, and FreightOnNervos and RIVET demoed at the Nigeria event.
⚪ Token Utilities
$CKB is the state-rent asset of the network, which is an unusual design.
➛ State storage: holding one CKB entitles you to store one byte of state on chain, making the token a claim on blockspace rather than only a gas asset.
➛ Transaction fees: paid in CKB for computation and state changes.
➛ Nervos DAO: locking CKB earns secondary issuance back, offsetting the dilution that uncapped issuance would otherwise impose on holders.
➛ Mining: proof-of-work issuance through Eaglesong, on a 25-year primary halving schedule.
⚪ Key Features
➛ Proof-of-work Layer 1 with a generalised UTXO architecture through the Cell Model.
➛ RGB++ binds assets to Bitcoin UTXOs with no bridge and no wrapped token.
➛ Fiber brings payment channels with atomic swaps into Bitcoin Lightning.
➛ Optional SPHINCS+ hash-based locks live on mainnet since late 2025.
➛ State rent model where token holdings translate directly into storage rights.
➛ Nervos DAO lets holders neutralise secondary-issuance dilution by locking.
🔵 Meet the Team
Nervos runs on a three-person founding bench that has stayed intact since 2018, through the 2019 mainnet launch and the long stretch of low attention that followed. For a project this old, nobody leaving is itself a data point.
▶️ Core Members:
➛ Terry Tai - CEO & Director | Leads the company and sits on the board, having moved from the founding team into the executive seat. He has carried the project through the Foundation-to-CKBA restructure and the post-exploit pivot toward bridgeless architecture.
➛ Kevin Wang - Co-Founder | The most visible outward-facing voice on architecture, particularly on the case for separating storage and verification from execution, which is the thesis the entire Cell Model rests on.
➛ Daniel Lv - Co-Founder | Came out of the Ethereum ecosystem engineering side and has focused on the protocol and VM layer, the part of the stack that produced CKB-VM and the Cell Model implementation.
➛ CKBA (Common Knowledge Base Association) | The Swiss Verein that replaced the Foundation as the coordination body, which closed membership applications on 15 September with five applications queued for the General Assembly. It does not control the chain, which stays permissionless proof-of-work.
➛ Nervos DAO and Community Fund DAO | Ecosystem funding and governance, with a community dashboard launched in late September, FiberLatch Access completed and paid, and Vellum passed in the recent cycle.
🔵 Ratings
➛ Use Case: ★★★★ (4/5). CKB is solving a problem that keeps proving itself real. Bridges fail repeatedly, and RGB++ binds assets to Bitcoin UTXOs without one, which is a structurally better answer than most of the industry has. The Cell Model is a serious architectural idea, Fiber extends it into payment channels with working atomic swaps into Lightning, and the SPHINCS+ locks mean the post-quantum conversation reaching Ethereum this week is one CKB already acted on. The 1-point deduction is adoption. The pilots are small, with roughly 30 users in the Kenya test, UTXOSwap is closing this week, and a market cap near $62M after seven years on mainnet reflects a chain whose engineering has consistently outrun its usage.
➛ Tokenomics: ★★★⯪ (3.5/5). The state rent design is genuinely original, tying token holdings to storage rights so that demand for blockspace translates into demand for CKB rather than only into fee burn. The Nervos DAO gives holders a mechanism to lock and recapture secondary issuance, neutralising dilution for anyone willing to commit, and primary issuance follows a predictable 25-year halving schedule. The 1.5-point deduction is that issuance is uncapped, with roughly 49.7 billion CKB circulating and the dilution offset available only to holders who actively lock. The token is down about 69% year on year and hit an all-time low in August, which is a long way from the March 2021 high and indicates the state rent demand loop has not yet reached the scale the design assumes.
➛ Audits: ★★★★ (4/5). Nervos holds a verified CertiK Skynet Score of 85.77, grade A, with eight passed security checks against a single informational flag and zero warnings or alerts. The architecture adds genuine weight on its own: proof-of-work consensus, a UTXO-derived model carrying narrower state assumptions than account-based chains, optional SPHINCS+ post-quantum locks live on mainnet since late 2025, and an RGB++ design that removes bridge custody entirely rather than attempting to secure it. Node and light-client security hardening shipped in the September cycle alongside CKB-VM v0.24.15 and a transaction-pool architecture review. The 1-point deduction is the exploit record and the scope of the rating. Force Bridge suffered multiple incidents including a $3.9 million exploit in June 2025 that prompted a DAXA warning, and the Skynet listing carries a partial rating badge with governance left unscored, so the A grade rests on fewer completed dimensions than a full panel.
➛ Community: ★★★★ (4/5). The community is small but unusually durable, having stayed through a 69% annual drawdown and years of limited attention. The activity is real rather than performative: the Gone in 60ms hackathon produced working infrastructure including FiberNuts and Fiber Forge, Off-Chain events ran in Nigeria on 3 October and Vietnam on 8 October with technical sessions rather than marketing, the Build on CKB campaign closed with 20 participants, and a Dev Rel AMA ran on 28 September with the CCC maintainer. Governance is participatory through the Community Fund DAO with a public dashboard. The 1-point deduction is scale and attrition, with twenty-participant campaigns and thirty-user pilots pointing to a committed core rather than a growing base, and UTXOSwap closing this week shows the ecosystem losing pieces as well as adding them.
🔵 Conclusion
CKB is a chain that keeps arriving early and waiting. The Cell Model predated the current interest in UTXO-based programmability, RGB++ solved bridgeless Bitcoin assets before the latest round of bridge failures, and the optional SPHINCS+ locks went live on mainnet roughly a year before the Ethereum research community started arguing publicly for hash-based signatures.
The engineering has been consistent and the past month shows it continuing, with Fiber reaching release-candidate stage, Fiber Studio completing every milestone with signed builds, and mobile tooling progressing on both Android and iOS.
The gap is everything downstream of the engineering. A $62M market cap after seven years on mainnet, an all-time low set in August, pilots measured in dozens of users, campaigns closing with twenty participants, and a DEX shutting down this week all describe a project whose technical output has not converted into usage or value. The Force Bridge exploit history sits on the record, and the Skynet rating that offsets it is still only partial.
What makes it worth watching is the specificity of the bet. If Bitcoin needs an asset layer that does not require trusting a bridge, and if the post-quantum conversation now reaching Ethereum pushes chains toward hash-based signatures, CKB has already built both.
Being right early only counts if the market eventually arrives, and that is the thing CKB has been waiting on for seven years. https://x.com/0xchainink/status/2108182799094337715