
LayerZero attributed a $290 million Kelp DAO exploit to inadequate security configuration, claiming Kelp used a single-verifier setup despite warnings. Attackers, preliminarily linked to North Korea's Lazarus Group, compromised RPC nodes and executed a DDoS attack to manipulate LayerZero's verification infrastructure, enabling fraudulent cross-chain transactions.