

Michael Olakunle
113 posts

@michael262s2x
Digital Specialist | I build AI workflows, automated content systems & Shopify stores for businesses worldwide 🌍 https://t.co/kcG7JfaMeS | GEO | Data Management






Good catch on the DVN config. 1/1 required, LayerZero Labs only, zero optional threshold, is a genuine single-point-of-failure setup for a $293M pool. That looks weird @PrimordialAA 😅 but it’s 5am. Still open though. Two paths fit the same config: 1.DVN compromise or bug. No legit send(). Our hypothesis lands here if a source tx never existed. 2.Source peer key compromise. A real send() with a hijacked Kelp peer, DVN validly signs a real-but-malicious message. LZ Scan was showing source tx hash pending last I checked. If no source tx for nonce 308 ever surfaces, you’re right and this is DVN-side. If a real send() exists with the Kelp-labeled peer as sender, it’s OApp-side. Either way, D2 Finance and its users are not affected. Back to sleep 💤


