LayerZero KelpDAO exploit: $292M rsETH don carry; DVN one point don fix
LayerZero don publish dia incident report for the KelpDAO rsETH bridge attack, confirm say the LayerZero KelpDAO exploit cause about 116,500 rsETH comot (≈$292M). LayerZero talk say the problem bi only for KelpDAO rsETH deployment, e cause by one risk wey single DVN (1/1) setup wey LayerZero Labs na the only verifier.
LayerZero say na compromised off-chain verification infrastructure cause the breach, no be beta for LayerZero core protocol. Attackers supposedly "poison" DVN RPC nodes by getting RPC list, compromise two nodes for different clusters, replace op-geth binaries, and give forged transaction data only to the DVN while dem dey return correct data elsewhere. One DDoS force failover go the poisoned nodes, make the DVN approve messages wey never happen on-chain.
Attribution don tight: Chainalysis link the activity to North Korea’s Lazarus Group (TraderTraitor). Nexus Mutual estimate say the $292M drain happen for under 46 minutes. LayerZero respond by replace the affected RPC nodes, restore DVN operations, involve law enforcement/partners (including Seal911), and—most important—stop signing/attesting for any apps wey use 1/1 DVN setups while dem dey push multi-DVN redundancy and independent verifier consensus.
Bearish
Dis na na direct DeFi hack wey tie to di rsETH bridge flow: LayerZero KelpDAO exploit don confirm for about 112k+ rsETH (~$292M), and report show structural weak point (1/1 DVN single point of failure) plus di use of forged data and DDoS-induced failover. For rsETH traders, dis mean higher counterparty/operational risk and likely short-term redemptions, liquidity stress, and bad market sentiment. Even though LayerZero dey tighten controls (multi-DVN push, stop attestation for 1/1 DVN apps, replace RPC nodes) and law enforcement dey do tracing, di size of di event and how quick dem lose funds (under 46 minutes) fit keep volatility high short-term. Long-term, security upgrades fit stabilize confidence, but immediate market reaction to big confirmed drain on rsETH dey usually negative.