{"id":90873,"date":"2026-05-09T06:01:32","date_gmt":"2026-05-09T06:01:32","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=90873"},"modified":"2026-05-09T06:01:32","modified_gmt":"2026-05-09T06:01:32","slug":"crypto-security-fears-rise-as-chaos-labs-reveals-attempted-advanced-wallet-attack","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=90873","title":{"rendered":"Crypto Security Fears Rise As Chaos Labs Reveals Attempted Advanced Wallet Attack"},"content":{"rendered":"
\n

Several crypto firms are switching oracle providers after Chaos Labs disclosed it was targeted in a sophisticated hacking attempt last weekend \u2014 one that authorities believe may have been carried out by a nation-state actor.<\/p>\n

Firms Move To Chainlink<\/h2>\n

Borrowing platform Tydro announced it is migrating to Chainlink\u2019s oracle infrastructure following the incident<\/a>. Solv Protocol flagged similar plans, citing recent industry events as the reason for moving its cross-chain setup away from LayerZero.<\/p>\n

Kelp DAO, still recovering from an April exploit, is also shifting its restaking token rsETH to Chainlink. The moves signal a broader loss of confidence in alternatives, even as Chaos Labs insists its core systems were never touched.<\/p>\n

Chaos Labs founder Omer Goldberg said the attack<\/a> was contained to operational wallets the company uses for routine on-chain activity. The oracle network itself \u2014 which supplies price and data feeds to blockchain applications \u2014 was not breached at any point.<\/p>\n

\n

Over the weekend, we identified an attack on Chaos Labs. The surface area was strictly contained to operational wallets we use for routine onchain operations. At no point was the Chaos Oracle Network breached or compromised. Chaos Oracles run in a fully isolated environment with\u2026<\/p>\n

\u2014 Omer Goldberg (@omeragoldberg) May 7, 2026<\/a><\/p>\n<\/blockquote>\n

\u201cChaos Oracles run in a fully isolated environment with nodes distributed globally, protected by layered security and cryptographic controls,\u201d Goldberg said in a post on X.<\/p>\n

The company rotated all keys following the incident and said no suspicious activity has been detected since.<\/p>\n

Attack Consistent With Nation-State Methods<\/h2>\n

Cyber professionals and authorities working alongside Chaos Labs told the company the methods used were consistent with nation-state attacks<\/a>, according to Goldberg.<\/p>\n

He did not name a specific country. The investigation is ongoing, and Goldberg said more details would be shared as circumstances allow.<\/p>\n

<\/p>\n

State-backed hacking groups, particularly those linked to North Korea, have long been seen as a serious threat to crypto infrastructure.<\/p>\n

Reports indicate North Korea-affiliated actors stole at least $578 million across several incidents in April alone. North Korea has denied involvement in global cybercrime, calling such allegations unfounded.<\/p>\n

Goldberg said Chaos Labs<\/a> triggered its highest-severity incident response immediately after detecting the attempt. The company allocates a significant portion of its operating budget to cyber defense, monitoring, and detection systems.<\/p>\n

A Difficult Month For Crypto Security<\/p>\n

The Chaos Labs incident comes against a backdrop of widespread attacks across the industry. The Kelp DAO hack earlier in April was among the year\u2019s most damaging, sending ripple effects through the crypto lending market and causing Aave\u2019s total value locked to drop by $8 billion. Drift Protocol and at least a dozen other crypto entities were also hit during the same period.<\/p>\n

Featured image from Pixabay, chart from TradingView<\/em><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Several crypto firms are switching oracle providers after Chaos Labs disclosed it was targeted in a sophisticated hacking attempt last weekend \u2014 one that authorities believe may have been carried out by a nation-state actor. Firms Move To Chainlink Borrowing platform Tydro announced it is migrating to Chainlink\u2019s oracle infrastructure following the incident. Solv Protocol […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-90873","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/90873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=90873"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/90873\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=90873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=90873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=90873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}