KelpDAO and LayerZero Dispute Over Security Configuration in $292 Million Hack

KelpDAO has alleged that a LayerZero employee approved a 1:1 validator configuration, which is linked to the $292 million rsETH hack. According to NS3.AI, this claim contradicts a LayerZero post-mortem released on April 19. LayerZero stated that it had advised a multi-DVN setup with multiple validators, but KelpDAO's rsETH application relied on LayerZero Labs as the sole validator. KelpDAO asserted that during eight discussions spanning over two and a half years, it was never cautioned that a single-validator setup posed a significant security risk.