Bridge uses same key custody for >30% validators

Beefy Finance's assessment for RD-F-156 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

LZ v1: both relayer and oracle operated by LayerZero Labs — single entity controls both functions for the LZ adapter path (>30% of that adapter's validator functions by one custodian). Axelar and CCIP have distributed validators but specific custodian-share data is not assessable without infrastructure tools. The 4-adapter architecture limits blast radius: LZ Labs single-custodian risk affects only one of four bridge paths.

Sources #

Etherscan
LayerZero v1 adapter — LZ Labs single-custodian for that pathLZ v1 adapter — NonblockingLzApp using LZ Labs relayer and oracle infrastructure for message deliveryretrieved 2026-05-16

Methodology #

Determine whether >30% of bridge validators share a single key custodian.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol beefy factor RD-F-156 score yellow collected_at 2026-05-16 13:10:30