KelpDAO $290M Exploit Attributed to North Korea's Lazarus Group

ZRO4,96%
ETH0,41%
AAVE5,02%

LayerZero attributed a $290 million exploit of KelpDAO’s cross-chain rsETH configuration to North Korea’s Lazarus Group on April 18, describing the attacker as a “highly-sophisticated state actor.” According to LayerZero, the incident was limited to KelpDAO’s rsETH setup and did not spread to other assets or applications using the protocol.

Exploit Mechanics and Attribution

LayerZero says the attack targeted downstream RPC infrastructure used by its Decentralized Verifier Network rather than exploiting the LayerZero protocol itself. The company states that compromised nodes have been replaced and the verifier network is back online. LayerZero attributes the attack to Lazarus Group and its TraderTraitor unit based on preliminary indicators.

Financial Impact on Aave

According to blockchain tracker LookonChain, the exploit led to roughly $292 million worth of rsETH being minted illegitimately. The attacker then used the token as collateral to borrow more than 82,600 Ether (ETH), worth about $195 million, from Aave.

The bad debt triggered large withdrawals from Aave, causing its total value locked (TVL) to fall by $6.28 billion in less than 48 hours, declining from $26.396 billion to $20.114 billion, according to LookonChain.

Major Withdrawals

LookonChain identified major withdrawals following the exploit:

  • $431 million from MEXC
  • $405.7 million from wallet 0x7CD0, possibly linked to Nonco
  • $392 million from Abraxas Capital

Response and Remediation

Aave moved to freeze rsETH markets on V3 and V4 to prevent additional borrowing and deposits while evaluating options to cover any deficit.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

ETH 8-Hour Average Funding Rate Turns Negative at -0.0016%

Summary: Ethereum funding rates are negative across major venues, with an 8-hour average of -0.0016%, indicating longs are paid by shorts; rates vary by platform, reflecting differing sentiment and leverage. Abstract: This brief summarizes negative Ethereum funding rates across major exchanges, indicating short sellers pay long positions. It also notes platform-level variations, reflecting differing market sentiment and leverage across venues.

GateNews34m ago

Bitcoin, Ethereum and Solana ETFs Record Positive Net Inflows on April 21

Gate News message, according to the April 21 update, Bitcoin ETFs recorded a 1-day net inflow of 3,599 BTC (approximately $272.59 million) and a 7-day net inflow of 18,914 BTC (approximately $1.43 billion). Ethereum ETFs showed a 1-day net inflow of 34,380 ETH (approximately $79.25 million) and a 7-

GateNews44m ago

Charles Schwab to Launch Bitcoin and Ethereum Trading, Releases Educational Content on BTC

Charles Schwab plans to expand into crypto, offering Bitcoin education and direct BTC/ETH trading, allowing customers to buy Bitcoin in accounts; analysts call it a major mainstreaming moment. Schwab announces an expansion into cryptocurrency with Bitcoin education and direct BTC/ETH trading, enabling clients to hold Bitcoin in their accounts; analysts view this as a turning point toward mainstream adoption.

GateNews1h ago

Newly Created Wallet Withdraws 35,000 ETH Worth $80.7M from Major CEX, Deposits into BitGo Custody

A newly created wallet withdrew 35,000 ETH (about $80.7M) from a major exchange within two hours, then transferred the full amount to a BitGo custody address. Abstract: A new wallet moved 35,000 ETH (≈$80.7M) from a major exchange and deposited it into BitGo custody, per Lookonchain.

GateNews1h ago

SharpLink Earns 470 ETH in Staking Rewards Last Week

Gate News message, April 21 — SharpLink, an Ethereum treasury company, earned 470 ETH in staking rewards last week, bringing its cumulative staking rewards to 17,850 ETH.

GateNews1h ago

Ethereum Open Interest Falls $2B as Derivative Trading Stalls

Gate News message, April 21 — Ethereum's derivatives market saw a significant deleveraging event over the past week, with traders closing over $2 billion in futures positions. ETH open interest fell to $12.4 billion, according to Coinglass, marking the second major capitulation event in 30 days. ETH

GateNews2h ago
Comment
0/400
GateUser-21ddf7c7vip
· 19m ago
I hope this time we can recalibrate the risk model that depends on third-party DAOs, otherwise similar incidents will happen again.
View OriginalReply0
Don'tCallMeABagHolder.vip
· 43m ago
I am more concerned about whether the source of $kRecovery 's buyback funds is sustainable, relying on protocol revenue or external injections? The risks of the two are completely different.
View OriginalReply0
ybaservip
· 3h ago
2026 GOGOGO 👊
Reply0
ybaservip
· 3h ago
To The Moon 🌕
Reply0
L2ArbitrageTradervip
· 4h ago
The key is to first clarify the actual exposure: Which specific types of positions in Aave are affected, and what are the bad debt pathways? Otherwise, it will be very difficult to review and build confidence.
View OriginalReply0
Low-PolyFloatingEarthvip
· 5h ago
If there is clear progress and a timeline for Arbitrum recovery, it can at least make expectations more predictable and easier to price.
View OriginalReply0
雾里看TVLvip
· 5h ago
230M this hole is a bit big, can Umbrella hold up?
View OriginalReply0
Stop-LossIsLikeAConfessionvip
· 5h ago
If new tokens need to be issued to fill the gaps, will existing holders be diluted? Incentive design is a real test for the team.
View OriginalReply0
GateUser-f4b3df7avip
· 5h ago
KUSD scaling can bring stable cash flow, of course, but during expansion, risk control must avoid making the same mistake again.
View OriginalReply0
AirdropsAfterTheTideRecedesvip
· 5h ago
Listening to $kRecovery 's gradual buyback and repayment sounds like "exchanging time for space," but is the market willing to give such patience?
View OriginalReply0
View More