Slow Mist Cosine Analysis Kelp Theft Event, Attackers Take 116500 rsETH Away

Preliminary analysis of SlowMist Cosine shows that in the Kelp theft incident, the attacker used LayerZero's 1/1 DVN single sign configuration instead of the officially recommended 2/2 configuration. The attacker paid a transaction fee through Tornado Cash and successfully took 116500 rsETH from Ethereum, but attempted to continue taking 40000 rsETH without success. At present, 116500 rsETH has been dispersed and washed away, causing huge bad debt pressure on staking platforms, especially Aave.