LayerZero OFT DVN config (count, threshold, diversity)
Venus Protocol's assessment for RD-F-179 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
SINGLE DEFAULT DVN (1/1 configuration). Venus XVS bridge uses OFT V2 (BaseOFTV2 from @layerzerolabs/solidity-examples v2). DVN configuration not overridden in contract — uses default LayerZero DVN. Venus docs explicitly confirm: 'Bridge relies on a single relayer, the default by LayerZero.' Operator diversity = 0 (single operator = LayerZero Labs). This matches the Kelp DAO 1/1 DVN pattern (Kelp DAO $292M Apr 2026). Mitigants: (a) bridge guards XVS governance token only, not $1.26B lending TVL; (b) BaseXVSProxyOFT rate-limiter (per-tx + daily caps + per-chain mint cap); (c) emergency wallet authorization via VIP in DVN downtime. YELLOW (not RED) because bridge is governance-token-only and rate limiters provide containment. Would be RED if this were the primary lending TVL bridge.
Sources #
- GitHubBaseXVSProxyOFT.sol sourceBaseXVSProxyOFT.sol imports BaseOFTV2 — OFT V2, no DVN overrideretrieved 2026-04-28
- XVSProxyOFTSrc on BscScanXVSProxyOFTSrc BSC verified — Solidity v0.8.13, 200 optimization runsretrieved 2026-04-28
- XVS Bridge | Venus ProtocolVenus XVS Bridge — 'Bridge relies on a single relayer, the default by LayerZero'retrieved 2026-04-28
Methodology #
For any LayerZero OFT adapter, read the DVN configuration: count of DVNs, k-of-N threshold, and operator diversity (independent operators vs same-operator multi-DVN).
See the full factor methodology and distribution across all protocols →