Kelp: The cause of the theft was the compromise of LayerZero's RPC node, with a 1/1 DVN configured as LayerZero's default setting.

According to Odaily, Kelp DAO officially posted on X to provide an update regarding the theft incident, stating that the reason for the breach was that two RPC nodes managed by LayerZero were compromised, while a third RPC node suffered a DDoS attack. This was a targeted attack on LayerZero infrastructure, and Kelp's own systems were not involved in the construction or operation of this infrastructure.

The 1/1 DVN configuration is a setup documented in LayerZero's official documents and is the default setting for all new OFT deployments. Since January 2024, Kelp has been operating on LayerZero infrastructure and maintaining open communication with the LayerZero team. During Kelp's expansion to Layer2, the DVN configuration issue was discussed, and at the time, the default configuration was explicitly confirmed as appropriate.

Kelp's current top priority is to protect users' interests and prevent risks from spreading within the DeFi ecosystem. The team is collaborating with various parties in the ecosystem to analyze the impact, seek support, and explore all possible mitigation solutions.