LayerZero OFT DVN config (count, threshold, diversity)

Evidence summary #

DVN configuration for USD0 OFT unconfirmed — HIGH RISK FLAG. Data cache returned dvn_configs: [] (pipeline gap). LayerZero's OFT Quickstart default shows a single required DVN (LayerZero Labs) with no optional DVNs — the 1/1 pattern. At the time of KelpDAO $292M incident (Apr 2026), 47% of active LZ OApps used 1/1 DVN (CoinDesk). Usual has not published its DVN configuration in docs or blog. Paladin Oct 2024 audit covered the OFT adapter but report is not publicly accessible for DVN config review. Scored YELLOW (not red) because 1/1 is unconfirmed — DVN config may have been hardened, but absence of disclosure prevents GREEN. Curator action required: on-chain cast call to ReceiveUln302.getConfig() for each remote EID (30110 Arbitrum, 30184 Base, 30102 BNB). If returned requiredDVNCount=1 and optionalDVNThreshold=0 for any pathway, upgrade to RED.

Sources #

Methodology #

For any LayerZero OFT adapter, read the DVN configuration: count of DVNs, k-of-N threshold, and operator diversity (independent operators vs same-operator multi-DVN).

See the full factor methodology and distribution across all protocols →