KelpDAO $290M Exploit Attributed to North Korea's Lazarus Group

ZRO3,72%
ETH0,1%
AAVE1,6%

LayerZero attributed a $290 million exploit of KelpDAO’s cross-chain rsETH configuration to North Korea’s Lazarus Group on April 18, describing the attacker as a “highly-sophisticated state actor.” According to LayerZero, the incident was limited to KelpDAO’s rsETH setup and did not spread to other assets or applications using the protocol.

Exploit Mechanics and Attribution

LayerZero says the attack targeted downstream RPC infrastructure used by its Decentralized Verifier Network rather than exploiting the LayerZero protocol itself. The company states that compromised nodes have been replaced and the verifier network is back online. LayerZero attributes the attack to Lazarus Group and its TraderTraitor unit based on preliminary indicators.

Financial Impact on Aave

According to blockchain tracker LookonChain, the exploit led to roughly $292 million worth of rsETH being minted illegitimately. The attacker then used the token as collateral to borrow more than 82,600 Ether (ETH), worth about $195 million, from Aave.

The bad debt triggered large withdrawals from Aave, causing its total value locked (TVL) to fall by $6.28 billion in less than 48 hours, declining from $26.396 billion to $20.114 billion, according to LookonChain.

Major Withdrawals

LookonChain identified major withdrawals following the exploit:

  • $431 million from MEXC
  • $405.7 million from wallet 0x7CD0, possibly linked to Nonco
  • $392 million from Abraxas Capital

Response and Remediation

Aave moved to freeze rsETH markets on V3 and V4 to prevent additional borrowing and deposits while evaluating options to cover any deficit.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

SharpLink Earns 470 ETH in Staking Rewards Last Week

Gate News message, April 21 — SharpLink, an Ethereum treasury company, earned 470 ETH in staking rewards last week, bringing its cumulative staking rewards to 17,850 ETH.

GateNews3m ago

Ethereum Open Interest Falls $2B as Derivative Trading Stalls

Gate News message, April 21 — Ethereum's derivatives market saw a significant deleveraging event over the past week, with traders closing over $2 billion in futures positions. ETH open interest fell to $12.4 billion, according to Coinglass, marking the second major capitulation event in 30 days. ETH

GateNews33m ago

Ethereum Drops Below $2,300, Down 0.64% Intraday

Gate News message, April 21 — Ethereum (ETH) fell below $2,300 intraday, declining 0.64% over the course of the day.

GateNews1h ago

Eightco Holdings Discloses $336M in Total Assets, Including 283.5M WLD and 11,068 ETH

Gate News message, April 21 — Eightco Holdings, a Nasdaq-listed company, disclosed an updated portfolio with total assets valued at approximately $336 million, according to PRNewswire. The holdings include 283,452,700 WLD tokens, 11,068 ETH, a $90 million

GateNews2h ago

Startale Expands to Abu Dhabi to Scale Regulated Blockchain Infrastructure

Startale Group, the global crypto infrastructure company behind Japan’s largest public Astar Network chain, is taking one of the world’s fastest-growing state-backed crypto ecosystems in Abu Dhabi The company was selected as one of 27 firms from more than 2,400 global applicants for the Hub71

DailyCoin2h ago

Altcoins Surge Back Above $1.3T as Markets Rally After Greenland Crisis Resolution

On January 22, altcoins rebounded nearly 10% to $1.39 trillion due to eased global tensions, with Ethereum leading gains. Despite some volatility, the combined market cap stabilized at $1.32 trillion as other altcoins also showed modest recovery.

Coinpedia2h ago
Comment
0/400
ybaservip
· 2h ago
2026 GOGOGO 👊
Reply0
ybaservip
· 2h ago
To The Moon 🌕
Reply0
L2ArbitrageTradervip
· 3h ago
The key is to first clarify the actual exposure: Which specific types of positions in Aave are affected, and what are the bad debt pathways? Otherwise, it will be very difficult to review and build confidence.
View OriginalReply0
Low-PolyFloatingEarthvip
· 3h ago
If there is clear progress and a timeline for Arbitrum recovery, it can at least make expectations more predictable and easier to price.
View OriginalReply0
雾里看TVLvip
· 3h ago
230M this hole is a bit big, can Umbrella hold up?
View OriginalReply0
Stop-LossIsLikeAConfessionvip
· 3h ago
If new tokens need to be issued to fill the gaps, will existing holders be diluted? Incentive design is a real test for the team.
View OriginalReply0
GateUser-f4b3df7avip
· 3h ago
KUSD scaling can bring stable cash flow, of course, but during expansion, risk control must avoid making the same mistake again.
View OriginalReply0
AirdropsAfterTheTideRecedesvip
· 3h ago
Listening to $kRecovery 's gradual buyback and repayment sounds like "exchanging time for space," but is the market willing to give such patience?
View OriginalReply0