LayerZero reports the KelpDAO theft incident, confirming that it only affects the rsETH configuration

By: rootdata|2026/04/20 13:00:45
0
Share
copy

LayerZero Labs released an incident report stating that KelpDAO suffered an attack resulting in a loss of approximately $290 million. Preliminary assessments indicate that the attacker is the Lazarus Group, which has ties to North Korea (more specifically, TraderTraitor). The attack was executed by poisoning the downstream RPC infrastructure relied upon by its decentralized verification network (DVN). The attacker controlled some RPC nodes and, in conjunction with a DDoS attack, induced the system to switch to malicious nodes, thereby forging cross-chain transactions.

All affected RPC nodes have been taken offline and replaced, and the DVN has now resumed operation. LayerZero emphasized that this incident was limited to the rsETH application configuration of KelpDAO and did not affect other assets or applications. The reason is that KelpDAO was using a single DVN (1/1) architecture at the time and did not utilize the multi-DVN redundancy mechanism that is officially recommended for long-term use, resulting in a lack of independent verification nodes to identify forged messages.

LayerZero pointed out that there were no vulnerabilities in its protocol itself, and applications with multi-DVN configurations were not affected, meaning there is no contagious risk in the system. LayerZero stated that it will urge all projects using single DVN configurations to migrate to multi-DVN architectures as soon as possible and has suspended providing signature and verification services for 1/1 configuration applications. Meanwhile, the company is cooperating with global law enforcement agencies to investigate and assist industry partners in tracking the stolen funds. LayerZero noted that this incident highlights the value of modular security architecture and also reminds the industry to pay attention to the potential security risks of RPC verification links.

-- Price

--

You may also like

Morning News | Michael Saylor stated that this week he bought bonds instead of Bitcoin; StablR was attacked and lost about 2.8 million dollars; the U.S. Congress is pushing the Bitcoin Reserve Act again

Overview of Important Market Events on May 24

SuperEx's Mars exploration dream: Digital currency is the key to unlocking economic exchanges in the interstellar era

SuperEx has always called for exchanges to focus not on internal strife and competition, but on jointly promoting the development of digital currencies, becoming a driving force for the future interstellar era.

Key Takeaways: Full Text of Google Chief Scientist Shanahan's Speech

Google DeepMind Chief Scientist Shanahan's London Speech: Deconstructing the mental attributes of large language models (LLM) using the framework of Wittgenstein, analyzing the trend of "alien self-identity" under the context of all-weather agents.

Agentic Design Patterns: A book that made me rethink "What exactly is an Agent?"

Google Engineering Director's new book deeply analyzes: 21 design patterns of AI Agents. This article reveals the core progression from "bare LLM" to advanced intelligent agents, detailing Context Engineering, the dual Agent reflection mechanism (Producer-Critic), and the three-layer memory model, w...

The richest chairman of the Federal Reserve in 112 years has arrived: Kevin Warsh is rewriting the rules

The "richest" new chairman of the Federal Reserve, Kevin Warsh, has officially taken office. His alternative proposal of "balance sheet reduction + interest rate cuts" aims not only to reshape the decision-making mechanism but also to profoundly disrupt the U.S. Treasury, the dollar, and the global ...

Vitalik talks about the future of the Ethereum Foundation: a smaller, more distinctive, yet more enduring ship

Vitalik elaborated on his personal views regarding the transformation direction of the Ethereum Foundation: EF is not "the center of Ethereum," but one of many nodes. With limited resources, EF chooses long-termism over spreading itself thin, focusing on key tasks that "would not happen without EF"—...
iconiconiconiconiconiconicon
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:[email protected]
VIP Program:[email protected]