Kelp DAO Disputes LayerZero's Account of $290 Million Exploit, Claims Default Settings Were to Blame

A recent crypto exploit has sparked a heated debate between Kelp DAO and LayerZero, with each side pointing fingers at the other. The incident in question involved a $290 million loss due to a compromised verifier. According to sources, Kelp DAO plans to contest LayerZero's claim that it ignored warnings about its single-verifier setup. Instead, Kelp asserts that the compromised verifier was part of LayerZero's own infrastructure and that the setup in question was the default configuration recommended by LayerZero. This configuration, known as a 1/1 setup, relies on a single validator to sign off on cross-chain messages, leaving the system vulnerable to exploitation if that validator is compromised. Kelp claims that this setup was not only recommended by LayerZero but is also used by 40% of protocols on the platform. The dispute highlights the complexity and risks associated with cross-chain messaging and the need for clear accountability in the event of security breaches. As the situation continues to unfold, both Kelp DAO and LayerZero are working to address the issues and prevent similar incidents in the future.