Skip to content

LayerZero Admits Mistake in $292M Kelp Exploit

LayerZero Acknowledges Mistake in $292 Million Hack Incident

  • LayerZero admitted to a security mistake involving its verification infrastructure that allowed a $292 million hack.
  • The company initially blamed Kelp DAO for a risky “1-of-1” configuration, which created a single point of failure for high-value transactions.
  • LayerZero will now implement stricter security measures, migrating all pathways to at least a “3/3” configuration for decentralized verifier networks (DVNs).
  • Kelp has shifted its rsETH bridge to Chainlink’s Cross-Chain Interoperability Protocol following the incident.
  • Solv Protocol is moving over $700 million in tokenized bitcoin infrastructure away from LayerZero after reviewing its security practices.

This admission highlights vulnerabilities in cross-chain bridges, which are critical yet often insecure components of the cryptocurrency ecosystem. LayerZero’s changes aim to prevent similar incidents in the future while emphasizing developer responsibility for security configurations.

LayerZero’s acknowledgment of its mistake and subsequent policy changes come after significant financial losses due to the hack, underscoring the importance of robust security measures in blockchain technology.(Source)

Share