Of roughly 2,665 unique OApp contracts, about 47% use a 1-of-1 DVN setup like the one tied to KelpDAO, 45% run 2-of-2, and only around 5% use 3-of-3 or higher, highlighting how much of the ecosystem still operates with relatively minimal verifier redundancy.

Its authors note that raw DVN count alone does not fully define security posture, since operator independence, optional-DVN thresholds, route-level differences, and message value all also matter, but the data still offers one of the clearest public snapshots yet of how LayerZero app security is actually configured in production.