LayerZero attributes past hack to single validator setup, vows improvements

LayerZero (ZRO) has apologized for a past security incident and admitted to poor communication regarding the event. The project was the cross-chain bridge exploited by hackers in the Kelp DAO rsETH incident. Through its official X account, LayerZero explained that a sub-RPC of its Decentralized Verification Network (DVN) was attacked by the North Korean hacking group Lazarus, which corrupted data, while an external RPC provider was hit with a DDoS attack. The project stated that while the protocol itself was unaffected, operating the DVN in a single validator mode was a serious mistake. LayerZero announced it will discontinue the single validator setup and transition the protocol's default to a multi-validator system of at least 3:3. It added that it will perform a full upgrade of its security infrastructure by developing new clients and introducing a multi-signature system and an integrated console management platform.