LayerZero: Multi-Signature Security Mechanism Updated

Odaily Planet Daily reports that LayerZero Labs posted on the X platform stating that the internal RPC used by LayerZero Labs was attacked by the Lazarus Group over the past three weeks, resulting in damage to the true source of its DVN (Decentralized Validation Network). Additionally, external RPC providers suffered DDOS attacks. This incident affected 0.14% of applications and approximately 0.36% of asset value. LayerZero Labs emphasized that assets are currently secure, and since April 19, over $9 billion in funds have been successfully transferred cross-chain through the protocol. In response to security risks, LayerZero Labs has ceased providing services for its DVN configured as 1/1, and all pathways will default to configurations of at least 3/3 or 5/5 multi-DVN modes. Furthermore, regarding an incident three years ago where a multi-signature holder misused a hardware wallet for personal transactions, LayerZero Labs has removed the signer and replaced the wallet. They have also developed a custom multi-signature system called OneSig. LayerZero Labs recommends developers lock configurations to avoid reliance on default settings and plans to launch an asset management platform called Console to enhance security monitoring.