Our LZ receiving libraries have been pinned. Thanks for the heads up @EbisuEthan. Also, the same pinning should be done for every network that the OFT supports, not just Ethereum.
Lost aura, gained security, A-OK.
Updated our tooling to detect pinning.
더 보기
layerzero solosig dependency check in
if you haven't hardened your config, you are sitting on an unnecessary dependency on layerzero 3/5 solosig.
if it gets compromised, it could instantly drain all the adapters that rely on the default receive library. after the kelp exploit, the vulnerable adapters tallied to $3.13 billion. after some outreach, the number has dropped to $178 million.
good progress, but still not enough. there is still a long tail of projects that have ignored this advice.
i will make this simple for you. here is a full list with exact calls for how to pin the default library.
더 보기
