Kelp DAO Challenges LayerZero's Account of $290 Million Exploit
A recent $290 million crypto exploit has sparked a heated debate between Kelp DAO and LayerZero. The incident occurred when attackers drained 116,500 rsETH, worth about $290 million, from Kelp's LayerZero-powered bridge by compromising the servers that LayerZero's verifier relied on. Kelp DAO is now disputing LayerZero's claim that it ignored warnings to move away from a single-verifier setup, instead arguing that the compromised verifier was part of LayerZero's own infrastructure. According to Kelp, the setup was based on LayerZero's default configuration, which is also used by 40% of protocols on the platform. The incident has raised questions about the security of cross-chain messaging infrastructure and the responsibility of platforms in preventing such exploits. Security researchers have also weighed in, criticizing LayerZero's handling of the situation and accusing the company of deflecting responsibility. As the debate continues, both Kelp DAO and LayerZero are working to address the incident and prevent similar exploits in the future.