Ripple CTO Warns RLUSD Faces DeFi Bridge Security Gaps

David Schwartz raised fresh concerns about integrating decentralized finance bridges for Ripple’s RLUSD stablecoin. He focused on security risks after reviewing several cross-chain systems. Besides that, his findings showed that most protocols had strong technical foundations but still faced deployment weaknesses.

I evaluated a lot of DeFi bridging systems for use by RLUSD. I was almost exclusively focused on the security and risk aspect. One thing I noticed is that most schemes were very well designed and had really strong mechanisms available to protect against exactly the type of attack…

— David ‘JoelKatz’ Schwartz (@JoelKatz) April 20, 2026

However, he stressed that operational decisions often weaken security layers. Many teams prioritize ease of use and faster expansion across networks. Consequently, critical safeguards get overlooked, which increases exposure to exploits across connected chains.

Convenience Trade-Offs Create Vulnerabilities

Schwartz explained that several bridge systems discourage full use of key security features. He noted that developers avoid complex safeguards due to cost and operational challenges. Moreover, this approach creates gaps that attackers can exploit during high-value transactions.

Additionally, he linked this pattern to recent exploit cases in the DeFi sector. He pointed out that convenience-driven decisions reduce resilience against advanced attacks. Hence, systems that appear secure in design may fail under real-world pressure.

KelpDAO Exploit Reflects Broader Risks

The recent attack on KelpDAO involved the loss of around $292 million tied to rsETH tokens. Attackers exploited cross-chain messaging linked to LayerZero infrastructure. Significantly, the exploit relied on manipulating transaction validation processes.

On-chain data showed that about 116,500 rsETH tokens moved to attacker-controlled wallets. Moreover, the attacker used these assets as collateral on Aave V3 to borrow ETH and WETH. Consequently, the funds moved through Tornado Cash to obscure transaction trails.

Cross-Chain Weaknesses Raise RLUSD Concerns

Schwartz noted similarities between the exploit and potential risks for RLUSD integration. He suggested that ignoring LayerZero’s advanced security features may have contributed to the breach. Additionally, he described the attack as more complex than initially expected.

Moreover, he emphasized that cross-chain infrastructure introduces multiple points of failure. Each connection between networks increases risk exposure. Hence, stablecoin systems relying on such bridges must prioritize strict validation mechanisms.

Broader Ecosystem Flags Additional Risks

Concerns also extend to wrapped assets such as wXRP on other networks. An XRPL validator highlighted counterparty risks tied to issued tokens across chains. Besides that, ecosystem participants continue to evaluate governance changes for lending protocols.

However, some developers argue that proposed updates may not deliver strong utility for XRP holders. Meanwhile, discussions continue around collateral use cases and protocol efficiency.