KelpDAO: $292 million evaporated in just 4 minutes. Smart contract, a foolish setup.


【Plain Language Guide】On April 18, 2026, North Korea's Lazarus Group, in just four minutes, forged a LayerZero single validator signature, minted 116,500 rsETH out of thin air, borrowed $236 million in real ETH from platforms like Aave, resulting in a $292 million major incident.
KelpDAO's misconfiguration was the main cause, leaving Aave with a $196 million bad debt problem. Fluid launched the aWETH redemption protocol, becoming the smartest move of the weekend.
In 18 days, DeFi has evaporated $600 million, and 47% of LayerZero projects still face 1-of-1 risk. This article fully dissects the attack details, loss map, and countermeasures.
For more details, see:
ETH4.09%
AAVE2.82%
View Original
post-image
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin