LayerZero links Kelp DAO exploit to Lazarus as DeFi losses deepen

cryptonews04-20

LayerZero said North Korea’s Lazarus Group is the likely actor behind the Kelp DAO exploit that drained 116,500 rsETH worth about $292 million. Summary LayerZero said Lazarus likely led the Kelp...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2628710164?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-04-20 15:46","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2628710164","market":"sg","top_or_hot":-1,"title":"LayerZero links Kelp DAO exploit to Lazarus as DeFi losses deepen","media":"cryptonews","content":"<div>\n<p>LayerZero said North Korea’s Lazarus Group is the likely actor behind the Kelp DAO exploit that drained 116,500 rsETH worth about $292 million. \n\n\nSummary\n\n\n\nLayerZero said Lazarus likely led the Kelp...</p>\n\n<a href=\"https://crypto.news/layerzero-links-kelp-dao-exploit-to-lazarus-as-defi-losses-deepen/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>LayerZero links Kelp DAO exploit to Lazarus as DeFi losses deepen</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nLayerZero links Kelp DAO exploit to Lazarus as DeFi losses deepen\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-20 15:46 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/layerzero-links-kelp-dao-exploit-to-lazarus-as-defi-losses-deepen/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>LayerZero said North Korea’s Lazarus Group is the likely actor behind the Kelp DAO exploit that drained 116,500 rsETH worth about $292 million. \n\n\nSummary\n\n\n\nLayerZero said Lazarus likely led the Kelp...</p>\n\n<a href=\"https://crypto.news/layerzero-links-kelp-dao-exploit-to-lazarus-as-defi-losses-deepen/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETHU","symbol_name":"2倍以太币期货ETF-Volatility Shares","start_time":0,"source_url":"https://crypto.news/layerzero-links-kelp-dao-exploit-to-lazarus-as-defi-losses-deepen/","article_id":"2628710164","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/layerzero-links-kelp-dao-exploit-to-lazarus-as-defi-losses-deepen/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2628710164","pubTimestamp":1776671169,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"LayerZero said North Korea’s Lazarus Group is the likely actor behind the Kelp DAO exploit that drained 116,500 rsETH worth about $292 million.LayerZero said Lazarus likely led the Kelp DAO exploit that drained 116,500 rsETH worth $292 million.LayerZero blamed Kelp DAO’s single-DVN setup, saying no backup verifier blocked the forged cross-chain message.The exploit triggered over $10 billion in Aave outflows and a wider DeFi TVL drop.The company said early indicators point to a “highly-sophisticated state actor” and named “DPRK’s Lazarus Group, more specifically TraderTraitor” in its latest statement.The attack took place on April 18 and quickly became the largest DeFi exploit reported this year. LayerZero said the attacker targeted the system used to verify cross-chain messages, which allowed a false message to pass through and unlock tokens on the bridge.In addition, LayerZero said the damage became possible because Kelp DAO used a single 1-of-1 DVN setup with no backup verifier. The ","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETHU":"2倍以太币期货ETF-Volatility Shares","YETH":"Roundhill Ether Covered Call Strategy ETF","QETH":"以太坊ETF-Invesco Galaxy","BK4601":"加密货币现货ETF","ETHV":"以太坊ETF-VanEck","BK4506":"内地教育股","EZET":"以太坊ETF-Franklin","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","BK4510":"在线教育","BETE":"等权重比特币&以太币期货ETF-ProShares","ETHA":"以太坊ETF-iShares","BETH":"比特币&以太币期货ETF-ProShares","BK4204":"教育服务","EETH":"以太币期货ETF-ProShares","ETHD":"ProShares UltraShort Ether ETF","DAO":"有道","BTF":"比特币&以太币期货ETF-CoinShares","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","ETHE":"最大以太坊ETF-Grayscale","FETH":"以太币ETF-Fidelity","ETU":"T-Rex 2X Long Ether Daily Target ETF","STCE":"Schwab Crypto Thematic ETF","ETHT":"ProShares Ultra Ether ETF"},"translate_title":"随着DeFi损失加深，LayerZero将Kelp DAO漏洞与Lazarus联系起来","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETU":0.67,"EZET":0.67,"ETHD":0.67,"DAO":0.67,"METHmain":0.67,"ETH":0.9,"ETHT":0.67,"ETHA":0.67,"BETH":0.78,"YETH":0.67,"ETHE":0.67,"ETHW":0.67,"EETH":0.67,"BTF":0.78,"FETH":0.67,"ETHU":0.67,"BETE":0.78,"STCE":0.78,"BEGS":0.78,"QETH":0.67,"ETHV":0.67},"content_text":"LayerZero said North Korea’s Lazarus Group is the likely actor behind the Kelp DAO exploit that drained 116,500 rsETH worth about $292 million. \n\n\nSummary\n\n\n\nLayerZero said Lazarus likely led the Kelp DAO exploit that drained 116,500 rsETH worth $292 million.\nLayerZero blamed Kelp DAO’s single-DVN setup, saying no backup verifier blocked the forged cross-chain message.\nThe exploit triggered over $10 billion in Aave outflows and a wider DeFi TVL drop.\n\n\n\nThe company said early indicators point to a “highly-sophisticated state actor” and named “DPRK’s Lazarus Group, more specifically TraderTraitor” in its latest statement.\nThe attack took place on April 18 and quickly became the largest DeFi exploit reported this year. LayerZero said the attacker targeted the system used to verify cross-chain messages, which allowed a false message to pass through and unlock tokens on the bridge.\nAttack centered on node access and message forgery\nLayerZero said the attacker got access to the list of RPC nodes used by LayerZero Labs’ decentralized verified network, or DVN. According to the company, the attacker then poisoned two of those nodes so they delivered a fake cross-chain message to the verifier network.\nAt the same time, the attacker launched a DDoS attack against clean nodes, which pushed the DVN to rely on the poisoned nodes. LayerZero said this combination allowed the forged message to move through the system and trigger the token unlock that led to the loss.\nIn addition, LayerZero said the damage became possible because Kelp DAO used a single 1-of-1 DVN setup with no backup verifier. The company said this created a single point of failure, leaving no independent check to reject the fake message before the bridge released funds.\nIn its statement, LayerZero said “operating a single-point-of-failure configuration meant there was no independent verifier to catch and reject a forged message.” It also said “LayerZero and other external parties previously communicated best practices around DVN diversification to KelpDAO.” The company added that it will no longer sign messages for applications that use a 1/1 DVN setup.\nAave outflows and DeFi pressure follow exploit\nThe exploit spread stress across DeFi after the attacker moved stolen rsETH to Aave V3 and used it as collateral to borrow large amounts of WETH. This raised concern over possible bad debt on Aave and led the protocol to freeze rsETH markets on both V3 and V4.\nAave founder Stani Kulechov said “RsETH has been frozen on Aave V3 and V4” and added that the asset no longer has borrowing power because of the Kelp DAO bridge exploit. Historical data from Aavescan showed more than $10 billion left Aave after the attack, with total supplied funds falling to $35.7 billion from $45.8 billion.\nThe fallout extended beyond Aave. Several DeFi protocols, including Ethena, ether.fi, Tron DAO, and Curve Finance, paused LayerZero OFT bridges as a precaution. \nDefiLlama data showed DeFi total value locked dropped 7% in 24 hours to about $86.3 billion, down from $99.5 billion on April 18. LayerZero said there is “zero contagion” for other assets or applications using multi-DVN setups, while law enforcement efforts to trace the funds continue.\n\n\n\n\n\n                Read more:\n            \n\n                Michael Saylor hints at new Bitcoin buy as Strategy nears 800,000 BTC","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.1","shortVersion":"4.42.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2628710164","isCrawlerRequest":true}