logo

KelpDAO suffers $290 million heist tied to Lazarus hackers

ID: 61a358d7-bd6f-58bf-85a5-0321b1be0e04

STIX ID: report--61a358d7-bd6f-58bf-85a5-0321b1be0e04

Feed Name: Bleeping Computer

Threat Score
90/100

Date Published: 2026-04-20

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

KelpDAO suffered a ~$290M theft after attackers compromised the cross-chain verification layer (DVN) by poisoning RPC nodes and DDoS-ing healthy nodes, allowing forged cross-chain messages to transfer ~116,500 rsETH through Tornado Cash. LayerZero attributes the complex operation to DPRK-linked Lazarus Group (TraderTraitor), and the incident impacted rsETH and prompted protocol freezes but appears isolated from broader contagion.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.