LayerZero admits 1/1 DVN security lapse after rsETH exploit as protocols shift to Chainlink CCIP

LayerZero Labs said on 8 May it mishandled communication after April’s rsETH incident and acknowledged its 1/1 DVN setup for high-value apps introduced risks it did not anticipate. The company also stated its internal RPC infrastructure used by the LayerZero Labs DVN was compromised during the attack and said 1/1 DVN is no longer supported, with defaults moving toward 5/5 or at least 3/3 verification. Following the roughly $292 million rsETH exploit, KelpDAO, Solv Protocol (over $700 million) and Re Protocol (more than $475 million TVL) announced migrations to Chainlink CCIP.