Techub News reports that Yu Xian, the founder of SlowMist, analyzed the Kelp DAO hacking incident and said that the LayerZero cross-chain used by the attacker was configured as 1/1 DVN—that is, the classic “single-signature” setup—while LayerZero’s official documentation recommends the default of 2/2. This “single-signature single point” may also have been taken down via social engineering (just a guess, pending the investigation). The attacker successfully stole 116,500 rsETH on Ethereum, and actually kept trying two more times to continue stealing 40,000 rsETH, but both attempts failed. The attacker’s transaction fees came from Tornado Cash. The 116,500 rsETH was dispersed and washed, shifting the pressure onto various staking platforms—especially Aave—which now faces massive bad debts.