Bridge signer-set change proposed/executed
ether.fi's assessment for RD-F-103 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
LayerZero OFT deployed on 18+ L2 chains; DVN set is the functional signer-set equivalent. Post-Kelp incident (Apr 18, 2026), ether.fi paused bridging and upgraded DVN 2→4 with 4/4 threshold. LayerZero multisig authority removed from on-chain config. Rate limiting tightened. Prior configuration was 2/2 — narrow but not 1/1. Rated yellow: improvement significant but DVN configuration on 18+ chains remains ongoing attack surface; any future unscheduled DVN change should be tier-A grade-eligible.
Sources #
- GitHub
- ether.fi weETH LayerZero bridge resumed with 4 DVNsWEEX news on bridge resume and DVN countretrieved 2026-04-28
- ether.fi Twitter — LayerZero bridging live with 4 DVNsether.fi X/Twitter announcement DVN upgrade 2→4 with 4/4 thresholdretrieved 2026-04-28
- EtherFi Secures weETH Cross-Chain Bridge with New UpgradesPhemex report on ether.fi weETH bridge security enhancementsretrieved 2026-04-28
Methodology #
Detect whether a bridge validator or signer-set change has been proposed or executed.
See the full factor methodology and distribution across all protocols →