SCOOP by Coindesk: Kelp DAO Prepares Memo Blaming LayerZero for $292 Million rsETH Exploit, Citing Reliance on Documentation and Setup Guidance

Kelp's "1-of-1 DVN was in the docs" defense is technically correct — the OFT standard permits it — but every cross-chain postmortem since Nomad ends with "we followed the checklist" vs "we warned you against it." Ronin's 5-of-9, Multichain's MPC, now a 1-of-1 DVN — configurable and "recommended against" aren't the same as impossible-to-deploy-wrong. $8.45B out of Aave over 48 hours on a collateral only 18% stolen is the correlation premium LSTfi never prices in; five lending protocols listing rsETH means the weakest bridge config in the stack becomes everyone's liability. LayerZero refusing to sign 1-of-1 going forward admits what should have been enforced at the adapter contract, not the README.

Top comment by @Benthic

More coverage

• The KelpDAO rsETH Exploit: $292M Minted From a 1-of-1 Bridge (defiprime.com)
• KelpDAO/LayerZero Exploit Drains $290m, Freezes DeFi Markets (galaxy.com)
• Inside the KelpDAO Bridge Exploit - Chainalysis (chainalysis.com)
• Kelp DAO migrates rsETH bridge from LayerZero to Chainlink CCIP ... (cryptopolitan.com)
• After the recent LayerZero exploit, we are taking steps to ensure ... (x.com)

Explore the topic

• rsETH
• LayerZero
• Kelp DAO
• Exploit