LAYERZERO ADMITS KELP DAO EXPLOIT RESPONSE FAILED

LayerZero published a blog post addressing its handling of the Kelp DAO hack, which occurred three weeks prior. The company admitted fault in its response and identified a critical security flaw: reliance on a single verifier for transaction validation. According to Dune Analytics data cited in the report, approximately 47% of LayerZero OApps (Omnichain Applications) operated with this identical default setup as of April. This widespread adoption of the vulnerable configuration amplified systemic risk across the protocol's ecosystem. The single-verifier model creates a centralization bottleneck where one compromised or malicious verifier can facilitate attacks across dependent applications. LayerZero's acknowledgment signals the need for architectural improvements and developer education regarding security configurations. The company's delayed communication compounded concerns in the crypto community, where rapid transparency is expected following major security incidents. LayerZero's apology represents an attempt to rebuild trust following the incident.