DVN security configuration should have been improved long ago; the cost of fixing it afterward is too high.

LayerZero Releases rsETH Attack Report: On April 18, KelpDAO's single validator cross-chain bridge was hacked, resulting in approximately 116.5k rsETH (about $292 million), with multiple organizations pointing to North Korean hacker TraderTraitor (UNC4899). The attack involved social engineering to steal developer session keys and infiltrate RPC cloud, injecting memory patches to mislead DVN, and external DoS to force DVN to trust only controlled nodes, thereby forging proofs for cross-chain messages and unlocking rsETH. Afterwards, LayerZero strengthened security measures: zero trust and least privilege, improved DVN security configurations, a comprehensive rebuild of infrastructure, and collaboration with ecosystem partners and law enforcement agencies for investigation and evidence collection.