KelpDAO rsETH Bridge Compromised on April 18, 116,500 rsETH ($292M) Stolen

According to BlockBeats, on April 18, KelpDAO's rsETH bridge built on LayerZero's cross-chain messaging protocol was compromised, resulting in approximately 116,500 rsETH ($292 million) being stolen. North Korean-linked hacker group TraderTraitor (UNC4899) was attributed to the attack. The attack did not affect LayerZero protocol itself or other OApps, only KelpDAO's single-validator bridge configuration.

LayerZero Labs responded by completely rebuilding affected infrastructure with zero-trust architecture, mandating minimum security configurations for all DVN-participated channels (rejecting single validators), and collaborating with ecosystem partners and law enforcement for investigation and fund tracking.