North Korea’s Lazarus Group has been linked to the largest DeFi exploit of 2026: a $292 million attack on Kelp DAO’s cross-chain bridge that drained 116,500 rsETH tokens on April 18 and triggered a $13.21 billion collapse in total value locked across decentralized finance. LayerZero, whose messaging infrastructure the attacker abused, released a post-mortem on April 20 blaming Kelp’s single-verifier security configuration and announcing it will refuse to serve any project still running that setup.
A cross-chain bridge is software that moves tokens between separate blockchain networks by locking assets on one chain and minting equivalent tokens on another. Kelp DAO’s bridge used LayerZero’s messaging layer to coordinate these transfers across 20 chains.
- 116,500 rsETH ($292 million) drained from Kelp DAO’s LayerZero bridge on April 18, 2026 — the largest DeFi exploit of the year.
- LayerZero pinned the attack on Lazarus Group’s TraderTraitor unit, citing compromised RPC nodes and a DDoS-forced failover that bypassed Kelp’s single verifier.
- Aave froze rsETH markets and lost $8.45 billion in deposits over 48 hours; DeFi TVL fell $13.21 billion; AAVE token dropped 16%.
- LayerZero will no longer process messages for projects using a 1-of-1 verifier configuration, a policy shift with industry-wide implications.
Published: April 20, 2026 13:00 UTC
How the attack worked
The attack exploited a structural weakness in how Kelp DAO configured its LayerZero integration. Kelp used a single-verifier model, meaning one node was responsible for confirming that cross-chain messages were legitimate before the bridge released funds.
Attackers — identified in LayerZero’s April 20 incident statement as likely belonging to the Lazarus Group’s TraderTraitor unit — compromised two RPC nodes Kelp relied on. They then launched a distributed denial-of-service attack to force a failover to the compromised nodes. Once those nodes were active, they told Kelp’s verifier that a valid cross-chain instruction had arrived. The bridge complied, releasing 116,500 rsETH to an attacker-controlled address. The malicious node software then self-destructed, wiping logs and binaries to slow forensics.
LayerZero said in its post-mortem that it had previously warned Kelp to adopt a multi-verifier configuration and found no evidence that the exploit stemmed from a bug in LayerZero’s core protocol. The infrastructure worked as configured. The configuration was the problem.
DeFi contagion spreads to Aave
Within hours of the drain, attackers deposited the stolen rsETH as collateral on Aave V3 and borrowed approximately $196 million in wrapped ether against it. Aave froze rsETH markets on V3 and V4 to stop further exposure, but the damage was already in motion.
Aave lost $8.45 billion in deposits over 48 hours as users exited ahead of potential bad-debt risk. SparkLend, Fluid, and Upshift froze rsETH positions as well. The AAVE token fell 16% in the 24 hours following the exploit. Across all of DeFi, total value locked dropped $13.21 billion — the steepest two-day decline since the FTX collapse in 2022.
Restaking is the practice of taking already-staked Ethereum and putting it to work securing additional protocols simultaneously for extra yield. Kelp’s rsETH token represented this restaked ETH. Its sudden depeg and illiquidity across 20 chains left users holding tokens they could not redeem at face value.
Lazarus Group’s accelerating pace
The Kelp DAO attack is the second confirmed Lazarus operation in April. The group’s TraderTraitor unit was also behind the Drift Protocol exploit on April 1, which netted roughly $283 million. Combined, North Korean hackers have extracted more than $575 million from DeFi in 18 days through two structurally different attack vectors.
Blockchain security firm Hacken reported in early April that Web3 hacks cost the industry $464.5 million in Q1 2026. With April’s toll now exceeding $606 million, 2026 is on pace to surpass $2 billion in losses for the year. Lazarus Group — sanctioned by the U.S. Treasury’s Office of Foreign Assets Control — has historically funneled stolen crypto into North Korea’s weapons programs.
What comes next for cross-chain security
LayerZero’s announcement that it will stop serving 1-of-1 verifier projects is the most immediate ripple. Any project currently using that configuration must upgrade before LayerZero cuts service, accelerating what was previously an optional best practice into a requirement.
Aave’s governance is expected to vote on updated collateral risk parameters for liquid restaking tokens following the exploit. The broader question for DeFi developers is whether modular security architectures — where protocols offload verification to external messaging layers — provide enough minimum guarantees when individual projects can choose dangerously weak settings.
U.S. regulators have not yet commented on the Kelp DAO exploit specifically, though the OFAC sanctions designation on Lazarus Group means any entity that facilitates conversion of the stolen funds could face enforcement exposure.
Frequently asked questions
What is Kelp DAO and what does rsETH represent?
Kelp DAO is a liquid restaking protocol that routes user Ethereum through EigenLayer to generate yield from securing multiple protocols simultaneously. rsETH is a receipt token representing that restaked position. The exploit drained 18% of rsETH’s total circulating supply of 630,000 tokens.
Why did Aave lose billions if it wasn’t directly hacked?
The attacker deposited stolen rsETH as collateral on Aave and borrowed $196 million in wrapped ether against it. That collateral is now near-worthless, leaving Aave holding bad debt. Depositors exited preemptively, pulling $8.45 billion in 48 hours, as a precaution against further losses.
Will affected Kelp DAO users be made whole?
As of April 20, Kelp DAO has not announced a recovery or compensation plan. The protocol has paused withdrawals and is working with blockchain security firms to trace the stolen funds. No on-chain recovery mechanism or insurance fund has been publicly confirmed.
