ABOUT

What is DVN Watch?

THE SHORT VERSION

DVN Watch reads DVN configuration directly from LayerZero EndpointV2 contracts for every OFT adapter across 20 chains, and surfaces how many independent operators are required to verify each bridging route.

The April 18, 2026 Kelp DAO rsETH incident brought this configuration pattern to wider attention. DVN Watch was built to make these configurations transparent and easily accessible for anyone doing due diligence.

HOW LAYERZERO BRIDGES WORK

LayerZero is a protocol that lets tokens move between blockchains. When you bridge a token — say, move USDC from Ethereum to Arbitrum — a message gets sent saying "lock X tokens on Ethereum, mint X on Arbitrum."

The security question is: who verifies that message is legitimate? That's the job of DVNs — Decentralized Verifier Networks. They are the gatekeepers.

Each bridged token (called an OFT — Omnichain Fungible Token) is configured with a set of DVNs per destination chain. Every message needs to be approved by the required DVNs before tokens are released on the other side.

WHAT MAKES A CONFIG DANGEROUS

The more independent verifiers required, the harder it is to forge a message. The problem arises when there is only one:

1-of-1 DVN → CRITICAL

One entity controls the entire bridge. If that entity is hacked, coerced, or goes rogue, an attacker can mint unlimited tokens on the destination chain.

2 DVNs, same operator → HIGH

Two signers are required, but they're run by the same company. One compromised organization still controls both.

2 DVNs, diff operators → MEDIUM

Two independent entities must both sign. Better, but still a small committee.

3+ independent DVNs → LOW

Multiple independent verifiers. Collusion or simultaneous compromise becomes much harder.

HOW WE COLLECT DATA

Every entry is read directly from the LayerZero EndpointV2 smart contract deployed on each chain. We call getConfig() for every OFT adapter on every supported chain pair and decode the onchain ULN (Ultra Light Node) configuration.

The data refreshes automatically every 6 hours. No off-chain data sources, no trust assumptions — everything is verifiable onchain.

COVERAGE

We index all LayerZero V2 OFTs across 17 chains: Ethereum, Arbitrum, Base, Optimism, BSC, Polygon, Avalanche, Linea, Scroll, Blast, Unichain, Mantle, zkSync, Zircuit, Swell, Ink, and Sonic.

The OFT list is sourced from the LayerZero metadata API and refreshed alongside the config data. Only LayerZero V2 (EndpointV2) deployments are covered — V1 OFTs use a different architecture and are not included.

BUILT BY

DVN Watch is a research tool by 4byte Research, a DeFi security research group. We focus on onchain risk analysis across bridges, lending protocols, and cross-chain infrastructure.