SlowMist: Kelp exploit linked to LayerZero 1/1 DVN config; 116,500 rsETH drained

SlowMist founder Yu Xian said preliminary findings suggest the Kelp theft stemmed from the use of LayerZero's 1/1 DVN single-signature configuration, rather than the officially recommended 2/2 setup. The attacker reportedly funded gas through Tornado Cash, then siphoned 116,500 rsETH on Ethereum and attempted to take another 40,000 rsETH without success. The stolen 116,500 rsETH has since been split up and laundered, raising bad-debt risks for staking platforms, with Aave facing the most notable exposure.