Chainalysis Flags Critical Blind Spot in DeFi Security as $292M Exploit Bypasses Burn Verification

"The ~$292M KelpDAO / rsETH bridge exploit highlights a critical blind spot in DeFi security. The breach originated from a flawed trust layer rather than defective smart contracts."

"Attackers targeted LayerZero infrastructure supporting KelpDAO, exploiting a 1-of-1 validator quorum. That configuration relied on limited remote procedure call endpoints, creating a single point of failure."

"The system accepted manipulated conditions as valid, allowing the exploit to proceed undetected by standard safeguards. This incident underscores the need for real-time monitoring in DeFi protocols."

A $292M exploit in decentralized finance (DeFi) has exposed significant weaknesses in cross-chain bridge design, particularly in KelpDAO's rsETH infrastructure. The incident illustrates how manipulated inputs can bypass validation systems, raising concerns about trust assumptions in multichain protocols. Chainalysis identified that the breach stemmed from a flawed trust layer rather than defective smart contracts. Attackers exploited a single validator quorum in LayerZero infrastructure, creating a critical point of failure that allowed unauthorized approvals without broader consensus, highlighting the need for enhanced security measures.

Read at news.bitcoin.com