KelpDAO blames LayerZero infrastructure for $292M rsETH hack, shifts to Chainlink CCIP
Bitcoin Ethereum News KelpDAO said LayerZero approved the bridge configuration later blamed for the $292 million rsETH exploit, escalating a dispute over responsibility for one of DeFis largest cross chain security failures this year. The dispute centers on the April 18 exploit that drained about 116,500 rsETH from KelpDAOs LayerZero bridge. Chainalysis said the attack was not a smart contract hack, but an attack on offchain infrastructure in which attackers compromised internal RPC nodes and used false data to trick a 1 of 1 DVN setup into releasing funds against a nonexistent burn. LayerZero said in its incident statement that the exploit was isolated to KelpDAO‘s rsETH configuration and resulted from its single DVN setup. The company said preliminary indicators pointed to a sophisticated state actor, likely North Korea’s Lazarus Group. Kelp pushed back on that framing, saying the 1 of 1 setup was not unique to Kelp and was widely used across LayerZero integrations. The team said LayerZeros own documentation and direct guidance pointed builders toward setups using LayerZero Labs as the required DVN, with no optional DVNs configured. The protocol also said it stopped additional damage by pausing contracts after detecting the exploit. Chainalysis said Kelp‘s intervention blocked a second $95 million theft,