Kelp DAO Drops LayerZero for Chainlink Following $292M Bridge Exploit

Kelp DAO has replaced LayerZero with Chainlink as its cross-chain infrastructure provider, following a $292 million exploit linked to vulnerabilities in bridge configuration.

The move positions Kelp DAO as one of the first major DeFi protocols to migrate away from LayerZero after the incident, signaling a shift in how cross-chain security is being evaluated across the sector.

Exploit Linked to Single-Verifier Bridge Configuration

The attack, which occurred on April 18, involved the exploitation of a LayerZero-powered Omnichain Fungible Token (OFT) bridge used by Kelp DAO.

Attackers, reportedly linked to North Korea’s Lazarus Group, drained approximately 116,500 rsETH by exploiting a single-verifier (1-of-1) Decentralized Verifier Network (DVN) configuration, effectively bypassing validation safeguards.

While LayerZero stated it had warned against such configurations, Kelp DAO and external observers pointed to the setup being widely used, including as part of default onboarding practices.

A cited analysis indicated that 47% of roughly 2,665 LayerZero applications were operating with similar single-verifier configurations at the time of the exploit.

Migration to Chainlink Targets Structural Security Weakness

Kelp DAO’s migration to Chainlink CCIP is aimed at addressing the architectural vulnerability exposed by the exploit.

Chainlink’s model relies on decentralized oracle networks requiring a minimum of 16 independent node operators to validate cross-chain transactions, contrasting with the single-verifier setup used in the compromised system.

As part of the transition, Kelp DAO will also adopt Chainlink’s Cross-Chain Token (CCT) standard for rsETH.

Cross-Chain Infrastructure Becomes a Security Differentiator

The incident has intensified scrutiny around cross-chain bridge design, particularly the trade-off between operational simplicity and decentralization.

LayerZero has since announced it will discontinue support for single-verifier configurations, reflecting broader industry adjustments following the exploit.

The migration highlights a growing shift toward multi-validator and decentralized verification models as baseline requirements for institutional-grade DeFi infrastructure.

DeFi United Initiative Mobilizes Recovery Efforts

Following the exploit, Kelp DAO became part of the DeFi United initiative, a coordinated effort to restore rsETH backing and stabilize the ecosystem.

Contributors to the initiative include LayerZero, which provided approximately 10,000 ETH through a combination of donations and loans via Aave.

The initiative has raised over $300 million in crypto assets to date.

Legal Dispute Emerges Over Frozen Arbitrum Funds

The aftermath of the exploit has extended into legal proceedings involving Arbitrum DAO.

Victims of prior North Korea-linked hacks have filed a lawsuit seeking to seize 30,766 ETH that had been frozen by Arbitrum’s Security Council following the incident.

The funds were under consideration for release into the DeFi United recovery effort when legal action was initiated.

Aave has filed an emergency motion to lift a temporary restraining order on the funds, adding further complexity to the recovery process.

Cross-Chain Security Models Enter New Phase of Scrutiny

The Kelp DAO exploit and subsequent migration underscore a broader shift in DeFi infrastructure design, where cross-chain interoperability is increasingly evaluated through a security-first lens.

The transition away from single-verifier systems toward decentralized validation frameworks reflects an evolving standard for risk management in multi-chain environments.

Cross-Chain Infrastructure Moves Toward Decentralized Validation Standards

The incident marks a turning point in how DeFi protocols approach cross-chain architecture.

Rather than treating interoperability as a feature layer, protocols are increasingly recognizing it as core financial infrastructure, where validator design, redundancy, and decentralization directly impact systemic risk.

Kelp DAO’s migration to Chainlink reflects this shift, positioning decentralized validation as a foundational requirement for secure cross-chain operations.