Kelp DAO attributes hack to LayerZero RPC node breach and DDoS attack

Huo Xing Cai Jing reports that Kelp DAO has posted an update on X regarding the breach, stating that the compromise occurred due to two RPC nodes hosted by LayerZero being breached, while a third RPC node suffered a DDoS attack. This was an attack targeting LayerZero’s infrastructure, not Kelp’s own systems, which were not involved in building or operating that infrastructure. The 1/1 DVN configuration is documented in LayerZero’s official guidelines and is the default setting for all new OFT deployments. Kelp has been operating on LayerZero’s infrastructure since January 2024 and has maintained open communication with the LayerZero team. During Kelp’s expansion to Layer2, the DVN configuration was discussed, and the default setting was explicitly confirmed as appropriate at the time. Kelp’s current priority is safeguarding user interests and preventing the spread of risk throughout the DeFi ecosystem. The team is collaborating with stakeholders across the ecosystem to assess the impact, seek support, and explore all possible mitigation strategies.