Kelp hacked for 116,500 rsETH, here’s a preliminary analysis: - The LayerZero cross-chain they used was configured with 1/1 DVN, which is the classic “single-signature” setup, while the default recommendation in LayerZero’s official documentation is 2/2. - This “single-signature single-point” setup might have been taken down through social engineering tactics. Of course, this is just speculation—waiting for further investigation. - The attacker successfully siphoned 116,500 rsETH on Ethereum and even attempted two more transactions to grab an additional 40,000 rsETH but failed. The attacker’s gas fees came from Tornado Cash. - The 116,500 rsETH has been dispersed and laundered, leaving the burden on various staking platforms, especially Aave, which now faces massive bad debt. - So, who will ultimately bear these losses? That depends on further updates from the affected platforms… @SlowMist_Team We’ll keep following up. #Crypto #Security #LayerZero