KelpDAO Hack: LayerZero Blames North Korea’s Lazarus and Kelp’s Poor Security
CoinGape·60-word summary·1 min read
KelpDAO, a liquid restaking protocol backed by YZi Labs, suffered a $290 million hack via LayerZero’s cross-chain bridge. LayerZero blames North Korea’s Lazarus Group and KelpDAO’s poor security practices for the exploit, which drained rsETH and risks contagion to protocols like Aave. The attack highlights security risks in cross-chain DeFi protocols.
A security breach linked to Lazarus, a North Korea-associated group, resulted in a $290 million loss for KelpDAO on April 16, 2026. LayerZero reported the attack, which appears connected to a sophisticated, state-aligned campaign. The incident has impacted Ethereum-based restaking markets and major DeFi lending platforms, highlighting ongoing vulnerabilities in DeFi security.
Top trader Ansem warns Ethereum could drop to $1,000 due to five risks, including DeFi exploits, $6 billion in outflows from Aave, and weakening network fundamentals. These factors challenge the bullish outlook for ETH, highlighting security concerns and potential vulnerabilities in the DeFi ecosystem that could impact Ethereum’s price trajectory.
Aave experienced a $300 million borrowing spike on April 20, signaling a liquidity crunch following the KelpDAO exploit on Saturday. The incident has caused ripple effects in stablecoin markets, highlighting increased risk and instability in DeFi platforms amid ongoing security concerns. The event underscores the vulnerability of decentralized finance protocols to security breaches and liquidity issues.
The Strait of Hormuz crisis caused an 8% surge in crude oil prices, highlighting vulnerabilities in global oil supply chains. This development, reported on April 20, 2026, raises concerns over prolonged market volatility and economic uncertainty. The crisis underscores the geopolitical risks impacting energy markets, which could influence broader financial stability and investment strategies.
On Friday, ARK Invest, led by Cathie Wood, bought 26,161 Netflix shares worth approximately $2.5 million after a nearly 10% post-earnings drop. The firm also sold $1.21 million in Circle shares amid a class-action lawsuit related to the Drift Protocol exploit and offloaded $1.36 million in bullish crypto stocks despite Bitcoin's rise.
The AAVE DeFi protocol suffered a major exploit, causing a $7 billion drop in total value locked (TVL) and a 15% price decline. The security breach raises concerns about DeFi protocol vulnerabilities, prompting increased scrutiny from investors and developers. The incident underscores the importance of robust security measures in decentralized finance platforms to prevent future exploits.