LayerZero Updates Multi-Signature Security After Internal RPC Attack; 0.36% of Assets Affected

According to LayerZero Labs, the protocol's internal RPC infrastructure suffered attacks from Lazarus Group over the past three weeks, affecting 0.14% of applications and approximately 0.36% of total asset value. External RPC providers also experienced DDoS attacks. Despite these incidents, LayerZero Labs confirmed assets remain secure, with over $9 billion in cross-chain transfers completed since April 19.

In response, LayerZero Labs has discontinued DVN service for 1/1 configurations and migrated all default pathways to multi-DVN modes requiring at least 3/3 or 5/5 signatures. The protocol also removed a multi-signature holder and replaced the compromised wallet, while developing a custom multi-signature system called OneSig to prevent future misuse.