ChainCatcher report: Kelp DAO officially posted on X regarding the ongoing incident, stating that the breach occurred due to two LayerZero-hosted RPC nodes being compromised, while a third RPC node suffered a DDoS attack. This was an attack targeting LayerZero’s infrastructure, not Kelp’s own systems, which were not involved in building or operating that infrastructure. The 1/1 DVN configuration is the solution documented in LayerZero’s official guidelines and serves as the default setting for all new OFT deployments. Kelp has been operating on LayerZero’s infrastructure since January 2024 and has maintained open communication with the LayerZero team. During Kelp’s expansion to Layer2, the DVN configuration was discussed, and the default setting was explicitly confirmed as appropriate at that time. Kelp’s current top priority is safeguarding user interests and preventing the spread of risk throughout the DeFi ecosystem. The team is collaborating with stakeholders across the ecosystem to assess the impact, seek support, and explore all possible mitigation strategies.
Kelp DAO Hacked Due to LayerZero RPC Node Breach
ChaincatcherShare
Summary
Kelp DAO confirmed a crypto hack tied to a security breach in LayerZero’s infrastructure. Two RPC nodes were compromised, and a third was subjected to a DDoS attack. Kelp’s systems were not involved in the incident. The DVN was configured using LayerZero’s default settings. The team has been collaborating closely with LayerZero since January 2024. Kelp is now focused on protecting users and assessing the impact alongside the DeFi community.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.