Kelp DAO shifts blame to LayerZero for $292 million exploit; Aave examines bad debt scenarios
The Block·60-word summary·1 min read
Kelp DAO blamed LayerZero for a $292 million exploit, disputing claims about their 1-of-1 DVN setup, which was shipped as default. The incident has prompted Aave to review potential bad debt scenarios. The attack highlights ongoing security concerns within the Web3 ecosystem, with LayerZero and Kelp DAO involved in a public dispute over responsibility.
Arbitrum has frozen $100 million worth of ETH linked to the KelpDAO exploit, which is believed to be connected to the Lazarus Group. This move aims to prevent further damage and recover assets. The incident highlights ongoing security vulnerabilities in DeFi platforms, emphasizing the need for stronger security measures to protect user funds and maintain trust in decentralized finance.
Arbitrum has frozen $71 million worth of ETH stolen in the Kelp DAO exploit, according to the Arbitrum Security Council. The funds remain locked and can only be moved through future governance decisions. The incident highlights ongoing security challenges within DeFi protocols and the importance of community-led responses to exploits.
On April 21, 2026, Arbitrum froze 30,766 ETH in response to the KelpDAO exploit, highlighting vulnerabilities in DeFi protocols. The emergency action underscores the systemic risks within interconnected DeFi ecosystems, where exploits can trigger significant financial instability across multiple platforms. This incident emphasizes the importance of security measures in decentralized finance.
The closure of the Strait of Hormuz has increased food and fuel prices in Somalia, worsening the country's economic vulnerability. This geopolitical tension highlights how disruptions in key trade routes can impact local economies, especially in regions heavily dependent on imports. The event underscores the broader global ripple effects of geopolitical conflicts on trade and prices.
Aave's risk manager modeled two bad debt scenarios following the Kelp DAO exploit. The first scenario, cheaper, risks rsETH depegging by approximately 15%. The second, more costly, offers better protection for Ethereum mainnet by limiting losses to layer 2. These models highlight potential vulnerabilities and risk mitigation strategies in DeFi security.
Kelp DAO attributes the $292 million rsETH exploit to a breach in LayerZero, with the Lazarus Group suspected of involvement. The incident underscores ongoing cybersecurity vulnerabilities in DeFi infrastructure and raises concerns about geopolitical risks in the crypto sector. The attack occurred in April 2026, highlighting the need for enhanced security measures in decentralized finance platforms.