KelpDAO migrates rsETH to Chainlink CCIP, continues mutual accusations with LayerZero over $292 million attack

Odaily Planet Daily News: Kelp DAO announced the migration of its restaking token rsETH to Chainlink CCIP, stating that the move is to enhance security. Previously, the cross-chain bridge built by Kelp DAO based on LayerZero was attacked on April 18, with hackers stealing approximately 116,500 rsETH, involving about $292 million, and using the related assets as collateral to borrow WETH on Aave v3.

Regarding the cause of the vulnerability, LayerZero previously stated that the issue stemmed from Kelp DAO adopting a single DVN verification path configuration instead of multiple independent verifications. Kelp DAO responded that this configuration was the default setting and that LayerZero had confirmed its security without indicating related risks. LayerZero CEO Bryan Pellegrino subsequently denied this claim, stating that Kelp DAO had actively modified the default multi-DVN configuration. Both parties continue to dispute the attribution of responsibility. (Cointelegraph)