{"id":96968,"date":"2026-05-10T11:39:19","date_gmt":"2026-05-10T08:39:19","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=96968"},"modified":"2026-05-10T11:40:11","modified_gmt":"2026-05-10T08:40:11","slug":"layerzero-admits-errors-following-292-million-kelp-hack","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/layerzero-admits-errors-following-292-million-kelp-hack\/","title":{"rendered":"LayerZero Admits Errors Following $292 Million Kelp Hack"},"content":{"rendered":"<p>The LayerZero team has publicly apologized for its response to the <a href=\"https:\/\/forklog.com\/en\/news\/kelp-protocol-loses-293-million-following-cross-chain-bridge-attack\">Kelp hack<\/a> and acknowledged that using a single verifier configuration to protect large transactions was a mistake.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"zxx\" dir=\"ltr\"><a href=\"https:\/\/t.co\/EjIy0dePj0\">https:\/\/t.co\/EjIy0dePj0<\/a><\/p>\n<p>\u2014 LayerZero (@LayerZero_Core) <a href=\"https:\/\/twitter.com\/LayerZero_Core\/status\/2052876712653013173?ref_src=twsrc%5Etfw\">May 8, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\u00a0<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe handled communication terribly over the past three weeks \u2014 we wanted to prioritize thoroughness in the form of comprehensive analysis, but we should have started with transparency,\u201d the statement said.<\/p>\n<\/blockquote>\n<p>On April 17, attackers withdrew approximately $292 million in rsETH from the Kelp liquid <a href=\"https:\/\/forklog.com\/en\/news\/what-is-restaking-and-how-to-make-money-from-it\">restaking<\/a> protocol via a <a href=\"https:\/\/forklog.com\/en\/news\/what-are-cross-chain-bridges\">cross-chain bridge<\/a> on the LayerZero platform. Investigations revealed that the attack was linked not to the smart contract but to infrastructure compromise and the use of a single verifier scheme (1\/1 DVN).<\/p>\n<p>Following the incident, LayerZero initially placed the blame on Kelp, claiming the issue was local. However, critics pointed out that the 1\/1 DVN configuration was effectively a standard recommendation when integrating the protocol. According to Dune, about 47% of LayerZero applications used a similar scheme at the time of the attack.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">Following the KelpDAO hack, we built an open analysis of DVN security configurations across every active OApp on LayerZero over the last 90 days.<\/p>\n<p>Of ~2,665 unique OApp contracts: 47% run a 1-of-1 DVN security floor, 45% run 2-of-2, and ~5% run 3-of-3 or higher.<\/p>\n<p>As we know,\u2026<\/p>\n<p>\u2014 Dune | We Are Hiring! (@Dune) <a href=\"https:\/\/twitter.com\/Dune\/status\/2046257791321670098?ref_src=twsrc%5Etfw\">April 20, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\u00a0<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe made a mistake by allowing our DVN to operate as 1\/1 for high-value transactions. We did not control the security of the solution, which created a risk we simply did not see,\u201d LayerZero admitted.<\/p>\n<\/blockquote>\n<p>The platform announced a series of changes, including:<\/p>\n<ul class=\"wp-block-list\">\n<li>abandoning the single verifier configuration \u2014 a 5\/5 scheme and at least 3\/3 will be applied by default;<\/li>\n<li>developing a second DVN client;<\/li>\n<li>launching Console \u2014 a unified platform for monitoring security and anomalies for asset issuers;<\/li>\n<li>increasing the multisig threshold from 5\/3 to 7\/10 for all blockchains.\u00a0<\/li>\n<\/ul>\n<p>In early May, the Kelp team decided to migrate to Chainlink&#8217;s CCIP interoperability protocol amid disagreements with LayerZero regarding the causes of the hack.<\/p>\n<p>As reported, the bitcoin project Solv Protocol also <a href=\"https:\/\/forklog.com\/en\/news\/solv-protocol-abandons-layerzero-following-kelp-hack\">abandoned<\/a> LayerZero&#8217;s cross-chain infrastructure in favor of CCIP.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The LayerZero team has publicly apologized for its response to the Kelp hack and acknowledged that using a single verifier configuration to protect large transactions was a mistake.<\/p>\n","protected":false},"author":1,"featured_media":96969,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"LayerZero admits errors after $292M Kelp hack, plans changes to security protocols.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1210,44,1093,1349],"class_list":["post-96968","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cross-chain-protocols","tag-cybercrime","tag-defi","tag-layerzero"],"aioseo_notices":[],"amp_enabled":true,"views":"11","promo_type":"1","layout_type":"1","short_excerpt":"LayerZero admits errors after $292M Kelp hack, plans changes to security protocols.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/96968","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=96968"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/96968\/revisions"}],"predecessor-version":[{"id":96970,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/96968\/revisions\/96970"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/96969"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=96968"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=96968"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=96968"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}