KelpDAO Bridge Hack: $292M Stolen by Lazarus Group Exploit

**KelpDAO Bridge Hack (April 18, 2026):** A sophisticated attack attributed to North Korea's Lazarus Group (TraderTraitor) compromised two RPC nodes and used DDoS against clean nodes to force reliance on the compromised nodes, enabling theft of ~116,500 rsETH (~$292M). The exploit exploited a single-verifier (1/1) configuration, prompted over $10B in withdrawals from Aave, and has led LayerZero to stop supporting single-verifier apps while coordinating with law enforcement to track funds.