LayerZero has acknowledged it made a mistake by allowing its own verifier network to secure high-value assets in a vulnerable setup. The admission comes weeks after a $292 million hack on Kelp DAO that the company had initially blamed on the developer. The firm says its core protocol remained unaffected.
LayerZero said late Friday that it erred by permitting its decentralized verifier network to operate in a 1-of-1 configuration for high-value transfers. This setup created a single point of failure that attackers exploited in April. The company attributed the breach to an attack on its internal RPC infrastructure, while external providers faced distributed denial-of-service attempts simultaneously.
