Dune: Nearly Half of LayerZero OApps Use Vulnerable Single Point Attack Configurations

On April 21, following the KelpDAO attack incident, Dune released an analysis on the X platform regarding the DVN security configurations of all active OApps on LayerZero over the past 90 days. The data shows that among approximately 2,665 independent contracts, about 47% use the lowest security level of 1-of-1 DVN configuration, 45% use 2-of-2, and about 5% are at 3-of-3 or higher configurations. The analysis indicates that KelpDAO’s rsETH falls into the 1-of-1 configuration category, highlighting the general lack of security redundancy design in current cross-chain applications.