LayerZero published a blog post Friday apologizing for poor communication in the three weeks since the $292 million Kelp DAO exploit.LayerZero conceded it should not have allowed its DVN to act as a sole verifier for high-value transactions.The protocol attributed the attack to North Korea’s Lazarus Group, which it says compromised internal RPC nodes and DDoS’d external ones to forge a cross-chain message.LayerZero also disclosed a previously unreported incident from roughly three and a half years ago in which a multisig signer used their production hardware wallet to execute a personal trade.The company announced a series of security changes, including ending support for the 1/1 DVN configuration.