What happened to Chaos Labs?

Chaos Labs said it detected an attempted cyberattack targeting operational wallets used for routine blockchain activity. The company stated that its core oracle network infrastructure was not breached.

Was the Chaos Oracle Network compromised?

No. Chaos Labs said the attack was contained to operational wallets and did not affect the oracle network itself. The company added that the infrastructure operates in an isolated environment protected by layered cryptographic controls.

Why does Chaos Labs believe the attack may be linked to a nation-state?

Founder Omer Goldberg said cybersecurity professionals and authorities reviewing the incident described the activity as consistent with nation-state-style cyber operations. The company did not publicly identify a specific country.

Why are oracle networks important in crypto?

Oracle systems provide external market and pricing data to decentralised finance protocols and blockchain applications. If compromised, they can potentially affect lending platforms, derivatives markets and automated trading systems.

What actions did Chaos Labs take after detecting the attack?

The company said it immediately initiated a full lockdown, rotated all relevant keys and strengthened security monitoring. Chaos Labs also stated that no suspicious activity has been detected since the incident.

Why are crypto infrastructure providers increasingly targeted by hackers?

Crypto infrastructure platforms often control critical systems handling large amounts of digital assets and financial data. State-backed hackers and organised cybercrime groups have increasingly targeted these systems because of their strategic importance.

Is North Korea linked to recent crypto attacks?

North Korean-linked hacking groups have frequently been accused of targeting crypto platforms and decentralised finance systems. Investigators have tied several major exploits in recent years to the Lazarus Group, although North Korea denies involvement.

How does this relate to the Kelp DAO exploit?

The attempted attack comes shortly after the $292 million Kelp DAO exploit, which intensified industry concerns around cross-chain and oracle infrastructure security. The broader DeFi sector has become increasingly focused on reducing systemic vulnerabilities.

Chaos Labs says oracle network safe after cyberattack attempt

Written by Jon CuthbertPublished May. 8 2026

Chaos Labs said its oracle infrastructure remained secure following an attempted cyberattack over the weekend that the company believes may have been linked to a nation-state actor.

Founder Omer Goldberg said the company immediately initiated a full lockdown after detecting suspicious activity affecting operational wallets used for routine blockchain transactions.

“The surface area was strictly contained to operational wallets we use for routine onchain operations,”

Goldberg said, adding:

“At no point was the Chaos Oracle Network breached or compromised.”

Chaos Labs said the oracle network operates in an isolated environment with globally distributed nodes protected by layered cryptographic and cybersecurity controls.

Goldberg added that authorities and external cybersecurity specialists reviewing the incident characterised the attack pattern as consistent with previous nation-state-style cyber operations.

The company said it has since rotated all relevant keys and has not detected further suspicious activity following the attempted breach.

The incident comes amid heightened security concerns across decentralised finance after a series of major exploits in recent months, including the Kelp DAO hack and multiple attacks linked to cross-chain infrastructure vulnerabilities.

Several crypto protocols have increasingly migrated toward Chainlink oracle and interoperability infrastructure in response to growing security scrutiny surrounding alternative cross-chain systems.