LayerZero Ties $292M KelpDAO Hack to North Korea's Lazarus Group
LayerZero said the attackers bypassed the bridge by spoofing RPC data, and Kelp’s single-verifier setup let 116,500 rsETH be drained, it said.
- LayerZero Labs attributed the $290 million Kelp DAO exploit to the protocol's security configuration, stating "KelpDAO chose to utilize a 1/1 DVN configuration" despite previous warnings against single-verifier setups.
- Attackers, whom LayerZero attributed with preliminary confidence to North Korea's Lazarus Group, compromised two RPC nodes and deployed a DDoS attack to force a failover to poisoned infrastructure.
- Once the failover triggered, Kelp's bridge released 116,500 rsETH to the attackers; malicious software then self-destructed, wiping local logs to conceal the manipulation of infrastructure RPCs.
- The LayerZero Labs verifier is back online, and the company will no longer sign messages for any application running a 1-of-1 configuration, forcing a protocol-wide migration.
- Lazarus Group has been linked to both the Drift Protocol exploit and Kelp, meaning the North Korean unit has drained more than $575 million from DeFi in 18 days through two structurally different attack vectors.
81 Articles
81 Articles
North Korea's Lazarus makes off with $290M crypto in Kelp DAO heist after siphoning funds using fraudulent transactions
Lazarus Group tricked the system by taking control of some of the servers used to verify transactions
North Korean hackers linked to $290M heist from cryptocurrency platform
North Korean cybercriminals were allegedly behind the theft of over $290 million from the decentralized finance (DeFi) platform KelpDAO on Saturday, Pyongyang’s second major cryptocurrency heist in April and largest virtual theft so far this year. In a statement released Monday, KelpDAO supplier LayerZero said TraderTraitor — a unit of North Korea’s Lazarus Group
North Korean hackers blamed for $290M crypto theft
The hack against Kelp DAO is the largest crypto heist of the year so far.
Coverage Details
Bias Distribution
- 80% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium











