Bridge validator threshold (k-of-M)
Pendle Finance's assessment for RD-F-149 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
LayerZero V1 governance messaging: effectively 1-of-1 threshold (single oracle attests, single relayer delivers — both LayerZero Labs default). V1 does not offer configurable k-of-N multi-validator threshold. PENDLE OFT (V2) DVN threshold: not confirmed. Ecosystem analysis post-KelpDAO indicates 47% of LZ OApps use 1-of-1 config; Pendle named as second-highest at-risk asset.
Sources #
- URLDeFi Hack Analysis: Billions Exposed After Kelp DAO ExploitCrowdFund Insider — Pendle named as 2nd-highest at-riskretrieved 2026-04-29
- PendleMsgSendEndpointUpg.solPendleMsgSendEndpointUpg.sol — adapter params uint16(1) = V1 type onlyretrieved 2026-04-29
Methodology #
Read the signature threshold required to approve a cross-chain message (for non-LZ bridges).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol pendle factor RD-F-149 score yellow collected_at 2026-04-28 21:09:40