LayerZero reports the KelpDAO theft incident, confirming that it only affects the rsETH configuration
LayerZero Labs released an incident report stating that KelpDAO suffered an attack resulting in a loss of approximately $290 million. Preliminary assessments indicate that the attacker is the Lazarus Group, which has ties to North Korea (more specifically, TraderTraitor). The attack was executed by poisoning the downstream RPC infrastructure relied upon by its decentralized verification network (DVN). The attacker controlled some RPC nodes and, in conjunction with a DDoS attack, induced the system to switch to malicious nodes, thereby forging cross-chain transactions.
All affected RPC nodes have been taken offline and replaced, and the DVN has now resumed operation. LayerZero emphasized that this incident was limited to the rsETH application configuration of KelpDAO and did not affect other assets or applications. The reason is that KelpDAO was using a single DVN (1/1) architecture at the time and did not utilize the multi-DVN redundancy mechanism that is officially recommended for long-term use, resulting in a lack of independent verification nodes to identify forged messages.
LayerZero pointed out that there were no vulnerabilities in its protocol itself, and applications with multi-DVN configurations were not affected, meaning there is no contagious risk in the system. LayerZero stated that it will urge all projects using single DVN configurations to migrate to multi-DVN architectures as soon as possible and has suspended providing signature and verification services for 1/1 configuration applications. Meanwhile, the company is cooperating with global law enforcement agencies to investigate and assist industry partners in tracking the stolen funds. LayerZero noted that this incident highlights the value of modular security architecture and also reminds the industry to pay attention to the potential security risks of RPC verification links.
You may also like

Perp DEX: The Next Generation Exchange "War"

The AI gamble of mining companies: Valuations enter a phase of differentiation, and it's hard to turn the tide

A letter from Alliance to entrepreneurs: Written on the occasion of Cursor selling for 60 billion dollars

Stablecoins Finally Find Real Returns: On-Chain Reinsurance Re Explained | Interview with Re Founder Karan Saroya

The impossible triangle is simply a pseudo problem

Will MicroStrategy fall into a death spiral? What will the macro trend be in the second half of the year?

Blockchain Capital Partner: The Core Secret of Arbitrage

STRC unanchored by 11%, can the perpetual motion machine of Strategy still operate?

Bitcoin Market Analysis 2026: Can BTC Reach $150K by Year-End?

Bitcoin ETF Outflows Hit a Record $4.4 Billion: What Are Traders Doing With Their Cash?

WEEX App Just Got Smarter – New Tabs for Faster Trades & Easy Asset Management

WEEX All-New Search Features: Find, Trade & Earn Faster Than Ever

Morning Report | Illinois signs the strictest digital asset tax law in the U.S.; RWA tokenization market size surpasses $43 billion, institutions accelerate the migration of on-chain assets

Full version of the debut Q&A! Federal Reserve Chairman Waller: Sticking to the 2% inflation target, establishing five special working groups, individual did not submit the dot plot

From Disruptor to Shadow Market: The Crypto Market is Becoming a Colony of Traditional Finance

Dalio's important long article: How to position in the current market environment?

OKX Star analyzes Binance's competitive advantages: when regulation levels the playing field, competition has just begun


