This weekend KelpDao lost $292M.
@LayerZero_Core just published their incident report.
The protocol worked as designed. The smart contracts were fine. The money left through an RPC poisoning attack on a single-DVN configuration that multiple parties had warned against.
A thread on what this teaches us about every attack surface. 🧵