Decentralized Trust Fails in KelpDAO Exploit

The recent KelpDAO exploit has raised questions about the true nature of decentralization in DeFi. On April 18, attackers drained 116,500 rsETH ($292M) from KelpDAO's bridge through a coordinated attack on its verifier network.

An investigation by Chainalysis found that the attackers used compromised data sources and a denial-of-service attack to trick the verifier into signing off on a transfer. This highlights a crucial issue with DeFi's current architecture: the reliance on single points of failure, even in systems labeled as 'decentralized'.

The case has sparked debate about who is responsible for ensuring the security and integrity of DeFi infrastructure. KelpDAO has alleged that LayerZero and CEO Bryan Pellegrino mishandled infrastructure security and risk disclosures, but these claims are yet to be resolved through litigation.