u/No-Tackle-8652

▲ 31 r/cardano

Layer Zero bridge partnership?

What is the future of the Layer Zero partnership after this Kelp / AAVE incident?

>The layer zero hack was the least surprising and most predictable hack of all time

>Ever since they first launched in 2022 it's been clear LZ was engineered to let the team "move fast & break things" while avoiding any liability when shit goes down

>When LZ launched in 2022, I dug into their code and found their "ultra light node", used to verify *a block was real*, in fact did *no verification* and simply trusted the oracle

>They had 3.5B TVL

>Today, lack of onchain block verification is killing Kelp, Aave, and all of DeFi

>LZ's callous attitude towards security was obvious from day 1

>Their bridge relied on a 2/2 multisig for security, in a world of ZK, optimistic, and sidechain bridges that were infinitely more secure

>Their flexibility in config was a precise-engineered tactic to avoid liability

>When I called it out, Bryan Pellegrino, the LZ CEO, resorted to gaslighting & what-ifs

>He said each signer in the 2/2 multisig *could* be "1000+ validators"

>4 years later, those validators never materialized

>LZ's strategy of "move fast & break things" worked extremely well for them in the past 4 years, and I've been fine with that

>I assumed after LZ got m0n3y & traction they'd patch up security. Any ethical person would do so.

>4 years later, it's obvious they did not

>At this point, it's obvious that not only layer zero's tech is hopelessly insecure, their *people* are rotten

https://xcancel.com/boredGenius/status/2046297895566229890

reddit.com
u/No-Tackle-8652 — 2 days ago