LayerZero: KelpDAO Loses ~$290M in Exploit, Attributed to DPRK’s Lazarus Group LayerZero reported that on April 18, 2026, KelpDAO suffered an exploit resulting in losses of approximately $290M, preliminarily attributed to DPRK’s Lazarus Group (TraderTraitor). The attack poisoned downstream RPCs used by the DVN and, combined with DDoS, forced failover, causing the DVN to validate transactions that never occurred, without exploiting protocol or key vulnerabilities. The incident stemmed from KelpDAO’s 1/1 DVN setup, creating a single point of failure; impact was limited to rsETH with no broader contagion. Affected RPCs have been replaced and the LayerZero Labs DVN is now operational. https://t.co/h8fUkCdkGF