#cross-chain
A set of research notes and deep dives focused on correctness, security, and operational evidence.
Best starting points
The KelpDAO Exploit Was Not a Bug
Incident memo (April 2026): the 116,500 rsETH release via LayerZero EndpointV2 was a semantic guard failure. Signatures are not truth unless they bind to a unique, finalized source-chain debit.
Roadmap
- Start with assumptions and invariants
- Enumerate failure modes and attack surfaces
- Define what to monitor and how to roll back