Kelp: The reason for the theft was that LayerZero's RPC nodes were compromised, and the 1/1 DVN configuration was set to LayerZero's default settings.

Kelp DAO officially addressed the theft incident in a post on X, stating that the theft was caused by the compromise of two RPC nodes hosted by LayerZero, while a third RPC node suffered a DDoS attack. This was an attack targeting LayerZero infrastructure; Kelp's own system was not involved in the construction or operation of this infrastructure. The 1/1 DVN configuration is the solution documented in LayerZero's documentation and is the default setting for all new OFT deployments. Kelp has been running on LayerZero infrastructure since January 2024 and has maintained open communication with the LayerZero team. During Kelp's expansion to Layer2, the DVN configuration issue was discussed, and the default configuration was clearly confirmed to be appropriate at that time. Kelp's current priority is to protect user interests and prevent the spread of risks within the DeFi ecosystem. The team is collaborating with various parties within the ecosystem to analyze the impact, garner support, and explore all possible mitigation solutions.