Cosine of Slow Fog: The pressure of Kelp security incidents has shifted to various pledge platforms Aave and may now have huge bad debts

On April 19, Slow Fog Cosine published an article on the X platform releasing a preliminary analysis of the theft of 116,500 rsETH security incidents by Kelp. He pointed out that the LayerZero cross-chain configuration used by Kelp is a 1/1DVN configuration, which is the classic "single signature" configuration. However, the LayerZero official document recommends 2/2DVN configuration by default. This "single signature" may also be eliminated by social workers (of course, this is just a guess, and the details will wait for investigation). The attacker successfully took away 116,500 rsETH on the Ethereum chain. In fact, he tried to take away 40,000 rsETH twice, but failed. The attacker's handling fee came from TornadoCash. Currently, 116,500 rsETH have been distributed and washed away, putting pressure on various pledge platforms, especially Aave's huge bad debts.