LayerZero just admitted they made a mistake in the $292M Kelp exploit.
Three things stood out:
- Validation relied on a single-signer assumption
- The "mistake" was hardcoded, not a runtime bug
- They caught it internally, but didn't ship the fix in time
Cross-chain isn't a tech problem anymore. It's an ops problem.



