SlowMist Cosmos: The Kelp DAO attacker used a single-signature configuration, with transaction fees sourced from Tornado Cash.

Techub News reports, SlowMist founder Yu Xian analyzed the Kelp DAO hack and stated: The LayerZero cross-chain used by the attacker was configured as 1/1 DVN, which is the classic "single signature" configuration, while the LayerZero official documentation recommends 2/2 by default. This "single signature single point" might also have been compromised by social engineering methods (just speculation, specifics await investigation). The attacker successfully stole 116,500 rsETH on Ethereum and actually attempted two more times to steal an additional 40,000 rsETH but failed. The attacker's transaction fees came from Tornado Cash. The 116,500 rsETH was dispersed and laundered, putting pressure on various staking platforms, especially Aave, which now faces massive bad debt.