GoPlus Security 🚦 (@GoPlusSecurity): ⚠️ #KelpDAO Attack Details Update:
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
⚠️ #KelpDAO Attack Details Update: Core issue: KelpDAO rsETH was configured with a 1-of-1 single DVN setup, which is a design flaw that violates #LayerZero’s multi-DVN redundancy model. Attack vector: The attacker gained access to the RPC nodes used by LayerZero DVN and compromised two of them. They then launched a DDoS attack against the remaining uncompromised RPC nodes, triggering a failover (RPC spoofing). As a result, LayerZero Labs DVN ultimately validated a completely non-existent malicious cross-chain message. Risk trend: LayerZero DVN infrastructure is increasingly becoming a target for nation-state level threat actors, especially the notorious Lazarus Group from North Korea.