v4 → v5
Scores
trust_score0 → 0
severity_base— → —
score_modifier-1.68 → -1.68
Sections
Attack Overview and Timeline → The Exploit: Timeline and Scale
unchanged
DVN Configuration and the 1-of-1 Single Point of Failure → Attack Mechanics: RPC Compromise and a Single-Verifier Configuration
unchanged
Attribution — Lazarus Group / TraderTraitor (DPRK) → Attribution to North Korea's Lazarus Group / TraderTraitor
unchanged
Downstream Contagion — Aave Bad Debt and DeFi Panic → Disputed Responsibility: Kelp DAO vs. LayerZero
unchanged
Fund Movement and Laundering Infrastructure → Contagion Into Aave's Lending Markets
unchanged
Legal and Regulatory Response → Arbitrum Security Council Freeze
unchanged
Industry Recovery — DeFi United → Laundering of Stolen Funds
unchanged
Systemic Implications — Bridge Security and Decentralization → Recovery Effort: The "DeFi United" Coalition
unchanged
(section 9) → Litigation: Kelp DAO's Evercrest Technologies Sues LayerZero and Co-Founder
unchanged
(section 10) → Remediation: Kelp DAO's Migration to Chainlink CCIP
unchanged
(section 11) → Background: Kelp DAO's Protocol and Coverage Gaps
unchanged
Timeline events
+ added2026-09 — (no description)
- removed2023 — (no description)
- removed2026-03-06 — (no description)
- removed2026-04-19 — (no description)
- removed2026-04-21 — (no description)
- removed2026-04-23 — (no description)
- removed2026-04-27 — (no description)
- removed2026-05-05 — (no description)
- removed2026-05-10 — (no description)
- removed2026-05-20 — (no description)
~ changed2026-04-18: “” → “”
~ changed2026-04-20: “” → “”
~ changed2026-04: “” → “”
~ changed2026-05: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v4 hash: e69f76c4a6d60f1072a0f3f202bebdc19b5241ae630ff912fa21e6f3e1df2644
v5 hash: 706824c439be16bfd9d19232744d47400895ec4349ee6c31813a7ac5f1dfaaa5