TechFlow News, May 6: Bryan Pellegrino, Co-Founder and CEO of LayerZero, refuted Kelp DAO’s prior accusations against LayerZero regarding the rsETH security incident. He stated that Kelp initially adopted the default MultiDVN or DeadDVN configuration; however, on-chain records show that Kelp DAO manually changed rsETH’s cross-chain configuration from the default multi-DVN setup to a 1/1 single-DVN configuration on April 1, 2024. LayerZero’s documentation explicitly warns multiple times that the 1/1 configuration must not be used in production environments.
Bryan Pellegrino added that LayerZero had previously recommended a 2/3 multisig DVN configuration to Kelp DAO and noted that nearly 100% of relevant transaction volume under the 1/1 configuration originated from rsETH. He also stated that a full post-mortem report will be published once external security auditors complete their review.
