Did Something Change? Ripple CTO Emeritus Probes KelpDAO Exploit Claims

“What percentage of LZ volume relies solely on LZ DVN？ The answer to that is 0%. There isnt a single application setup that solely uses the LZ DVN,” Pellegrino said at the time.

Did something change？

In response, Schwartz questions whether something has changed between late 2024 and now. This begs the question: if no application previously relied solely on a single DVN, how could that same configuration now be said to be the root cause of the KelpDAO exploit？

Did something change between December of 2024 and now？ Because unless Im confused, this is saying that the attack on KelpDAO could not have happened as LayerZero described it. https://t.co/a1ACnTf3Bg

— David ‘JoelKatz’ Schwartz (@JoelKatz) April 25, 2026

“Did something change between December of 2024 and now？ Because unless Im confused, this is saying that the attack on KelpDAO could not have happened as LayerZero described it,” Schwartz questioned.

If KelpDAO did in fact operate with a single-DVN configuration, it raises questions about whether the system architecture changed after LayerZero‘s CEO’s comments in 2024 or whether the earlier claims were not accurate.

Along these lines, Ripple‘s head of research Aanchal Malhotra, in a recent tweet, shared a few thoughts on the rsETH hack, noting that “the industry is moving toward better primitives—ZK proving, tighter audit standards. But primitives alone aren’t enough. Until security proofs and deployment environments are evaluated together, the gap remains.”