LayerZero says Kelp setup caused exploit, as Aave loss questions mount
Cointelegraph·60-word summary·1 min read
LayerZero announced that Kelp’s DVN setup caused the $290 million exploit on Aave in April 2026. The incident has raised questions about which protocol will cover the losses, as investors seek clarity on the security breach and potential recovery measures. The exploit highlights ongoing security concerns within the DeFi ecosystem.
Vercel's internal systems were compromised by attackers, raising concerns about potential malicious code in Next.js frontends used by DeFi applications. The breach has led to a $2 million ransom demand, threatening the security of DeFi funds and highlighting vulnerabilities in web infrastructure that could be exploited to drain digital assets.
A $285 million exploit targeting Solana’s leading perpetual exchange was linked to a DPRK-backed attack, exploiting a “durable nonce” vulnerability. The breach occurred in early April, highlighting security risks on the platform. This incident underscores the ongoing threat of state-sponsored cyberattacks in the crypto space, prompting increased scrutiny of blockchain security measures.
LayerZero has attributed a $292 million bridge hack on KelpDAO to North Korea’s Lazarus Group. The attackers forged a cross-chain message, nearly executed a second drain, and covered their tracks during the attack. The incident highlights ongoing security threats from state-sponsored hacking groups targeting DeFi infrastructure. The breach underscores the need for enhanced cross-chain security measures.
DeFiLlama co-founder suggests three options to address the $293 million KelpDAO hack fallout. If losses are distributed among KelpDAO users, they would face an 18.5% loss, creating a $76 million gap. Aave could cover this shortfall by selling assets or taking on debt, highlighting ongoing challenges in DeFi security and risk management.
Vercel confirmed a security breach on April 20, 2026, after a hacker demanded a $2 million ransom. The company has acknowledged the incident but has not disclosed specific details about the breach or the extent of data compromised. The ransom demand highlights ongoing cybersecurity threats facing Web3 and tech firms, prompting increased vigilance across the industry.
Nearly $1 billion in Bitcoin ETF inflows has strengthened the bullish outlook for the crypto market. The news comes amid concerns over a recent DeFi hack involving Kelp, which has heightened security jitters in the sector. The inflows highlight growing institutional interest, despite ongoing security challenges in decentralized finance platforms.