RT Suhail Kakar (@SuhailKakar)the kelp rsETH post-mortem is wildlazarus (dprk) compromised two rpc nodes that layerzero dvn was relying on. swapped the op-geth binaries. wrote a custom payload that forged messages *only when the dvn queried* - every other IP, including monitoring, saw clean truthful data.then they DDoS'd the healthy RPCs to force failover onto the poisoned ones. drained $290M. self-destructed the malicious binaries to erase tracks.they targeted rsETH because kelp ran a 1-of-1 DVN config wit ...