On April 18, 2026, attackers linked to North Korea's Lazarus Group drained 116,500 rsETH — approximately $292 million — from Kelp DAO's cross-chain bridge in under 46 minutes. The exploit, which targeted off-chain infrastructure rather than smart contract code, is the largest DeFi hack of 2026 to...
"We made a mistake by allowing our DVN to act as a 1/1 DVN for high-value transactions. We didn't police what our DVN was securing, which created a risk we simply didn't see." — LayerZero Labs, Public Apology Statement, May 9, 2026
On April 18, 2026, attackers linked to North Korea's Lazarus Group drained 116,500 rsETH — approximately $292 million — from Kelp DAO's cross-chain bridge in under 46 minutes. The exploit, which targeted off-chain infrastructure rather than smart contract code, is the largest DeFi hack of 2026 to date and triggered $13.2 billion in DeFi TVL losses across the broader ecosystem within 48 hours.
The root cause was a single-verifier configuration in LayerZero's Decentralized Verifier Network (DVN). After three weeks of public finger-pointing between Kelp DAO and LayerZero Labs, LayerZero issued a formal apology on May 9, conceding that it should never have allowed its DVN to operate as the sole verifier for high-value transactions. Analysis of on-chain data revealed that 47% of active LayerZero OApp contracts used the same 1-of-1 DVN setup at the time of the attack, exposing an estimated $4.5 billion in combined assets.
The fallout has reshaped the cross-chain bridge market. Kelp DAO and Solv Protocol have collectively migrated approximately $1 billion in assets from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP). Aave absorbed roughly $196 million in bad debt. A federal judge has authorized the transfer of $71 million in frozen ETH on Arbitrum tied to the exploit. The incident has revived a structural question that has persisted since the Ronin Bridge hack of 2022: whether cross-chain bridges represent a fundamental architectural weakness in DeFi infrastructure.
At 17:35 UTC on April 18, 2026, an attacker initiated a cross-chain message via LayerZero's EndpointV2 contract. The message instructed Kelp DAO's bridge to release 116,500 rsETH — roughly 18% of the token's 630,000 circulating supply — to an attacker-controlled address. The entire drain completed before Kelp's emergency pauser multisig froze core contracts at 18:21 UTC, 46 minutes after the initial transaction.
Two follow-up drain attempts at 18:26 UTC and 18:28 UTC reverted. Each carried the same LayerZero packet structure attempting to extract an additional 40,000 rsETH (approximately $100 million). The pause held.
According to Chainalysis and LayerZero's postmortem, the attackers were identified as North Korea's Lazarus Group, specifically its TraderTraitor subgroup. The attack vector was not a smart contract exploit. Instead, the attackers targeted the remote procedure call (RPC) nodes feeding data to LayerZero's DVN:
The attacker subsequently deposited the stolen rsETH into Aave V3 as collateral and borrowed substantial amounts of wrapped ETH against it.
The exploit succeeded because Kelp DAO's rsETH bridge was configured with a single verifier — the LayerZero Labs DVN — operating in a 1-of-1 configuration. In this setup, only one validator must sign off on a cross-chain message for the bridge to execute. There is no second check to catch a compromised or forged instruction.
LayerZero's recommended security model is a multi-DVN configuration where multiple independent verifier networks must independently confirm each cross-chain message. According to LayerZero's own documentation, the 1-of-1 setup "directly contradicts" this recommended model.
However, data compiled by Dune Analytics showed that 47% of active LayerZero OApp contracts were using the same 1-of-1 DVN configuration at the time of the attack. The combined value secured by these vulnerable configurations exceeded $4.5 billion, according to MEXC research.
Following the exploit, LayerZero announced that its DVN will no longer service 1-of-1 configurations. All defaults are being migrated to a minimum of 3-of-3 verification on chains where three DVNs are available, and 5-of-5 where possible.
The Kelp DAO exploit triggered cascading effects across DeFi. Because rsETH was used as collateral across multiple lending protocols and existed as wrapped tokens on more than 20 networks, the drain immediately raised questions about the backing of rsETH on every chain where it circulated.
According to CoinDesk, total DeFi TVL fell from $99.5 billion to $86.3 billion within 48 hours — a $13.2 billion decline. The impact was concentrated in lending protocols:
If losses were spread across all rsETH holders, the token faced an estimated 15% depegging. In scenarios where losses concentrated on Layer 2 networks — particularly Arbitrum and Mantle — bad debt projections rose to $230 million, according to CoinDesk analysis.
April 2026 recorded 28 separate crypto exploits totaling more than $625 million in losses. The Kelp DAO and Drift Protocol hacks ($292 million and $285 million respectively) accounted for approximately 93% of the month's total.
The three weeks following the exploit were marked by a public dispute between Kelp DAO and LayerZero Labs over responsibility.
April 19-20: LayerZero published an initial postmortem attributing the exploit to Kelp's application-level configuration. LayerZero stated that Kelp chose to rely on a single DVN, "directly contradicting" LayerZero's recommended multi-DVN model. LayerZero attributed the attack to North Korea's Lazarus Group.
April 20: Kelp DAO responded publicly, claiming that LayerZero personnel had approved the 1-of-1 verifier setup. Kelp stated that LayerZero's default settings were "what actually caused the $290 million disaster."
May 5: Kelp released documentation showing that LayerZero had reviewed and approved its bridge configuration prior to launch.
May 9: LayerZero published a blog post titled "First things first: an overdue apology." The company wrote: "We've done a terrible job on comms over the past three weeks" and "We wanted to prioritize completeness in the form of a comprehensive post-mortem, but we should have led with directness." LayerZero admitted: "We made a mistake by allowing our DVN to act as a 1/1 DVN for high-value transactions."
This marked a reversal from LayerZero's initial position, which had framed the incident as an application-level configuration failure by Kelp.
The exploit has triggered a measurable shift in cross-chain infrastructure preferences.
Kelp DAO: Announced migration of rsETH from LayerZero's Omnichain Fungible Token (OFT) standard to Chainlink's Cross-Chain Interoperability Protocol (CCIP). CCIP's architecture requires multiple independent oracle networks to approve transfers, eliminating the single-point-of-failure that enabled the exploit. The migration was announced on May 6, 2026.
Solv Protocol: On May 7, Solv announced it would migrate more than $700 million in tokenized Bitcoin infrastructure (SolvBTC and xSolvBTC) from LayerZero to Chainlink CCIP. Solv deprecated LayerZero support across Corn, Berachain, Rootstock, and TAC as it standardized on CCIP. According to CoinDesk, Solv's decision followed an internal security review prompted by the Kelp incident.
Combined, the Kelp and Solv migrations represent approximately $1 billion in protocol asset value moving from LayerZero to Chainlink CCIP. According to CryptoTimes, additional protocols controlling more than $2 billion in assets are evaluating similar migrations.
The competitive dynamic between LayerZero and Chainlink in the cross-chain messaging market has shifted materially. LayerZero's model delegates security configuration to application developers; Chainlink's CCIP model enforces multi-node verification at the infrastructure level. The Kelp exploit demonstrated the downside of the delegated-security approach when application teams underspecify their security parameters.
Three days after the hack, the Arbitrum Security Council took emergency action to freeze 30,766 ETH (approximately $71 million) held in an address on Arbitrum One connected to the exploit. The frozen funds represented roughly a quarter of the total amount drained.
The recovery process became complicated by competing legal claims. On May 1, a U.S. law firm filed a restraining notice on behalf of plaintiffs holding judgments connected to North Korean cybercrime cases, claiming the frozen ETH could be linked to Lazarus Group operations.
According to CoinAlertNews, a federal judge in Manhattan subsequently authorized the transfer of the approximately $71 million in frozen ETH to a protocol-managed wallet controlled by Aave, clearing the way for redistribution to affected users. The Arbitrum DAO voted to approve the release of the 30,765.67 ETH for Kelp rsETH hack compensation.
As of May 12, 2026, approximately $221 million of the stolen funds remains unrecovered.
The Kelp DAO exploit is the latest in a series of major bridge hacks that have defined DeFi's security landscape since 2022:
| Year | Incident | Loss | Attack Vector | |------|----------|------|---------------| | 2022 | Ronin Bridge | $624M | Private key compromise (Lazarus Group) | | 2022 | Wormhole | $326M | Signature verification bypass | | 2022 | Nomad | $190M | Initialization vulnerability | | 2022 | Harmony Horizon | $100M | Private key compromise (Lazarus Group) | | 2026 | Kelp DAO | $292M | RPC/DVN infrastructure compromise (Lazarus Group) |
According to CertiK, cross-chain bridge exploits accounted for $1.3 billion in losses in 2022 alone — 57% of total Web3 losses that year. The 2026 Kelp exploit demonstrates that attack vectors have evolved from smart contract bugs and private key theft to sophisticated infrastructure-level attacks targeting off-chain verification systems.
Bridges remain high-value targets because they hold large pools of locked assets backing wrapped tokens across multiple chains. A single bridge failure can drain reserves backing tokens on 20+ networks simultaneously, as the Kelp exploit demonstrated.
The Lazarus Group's involvement in at least three of the five largest bridge hacks — Ronin, Harmony, and now Kelp DAO — underscores the persistent state-sponsored threat to cross-chain infrastructure.
The Kelp DAO exploit exposes a structural tension in cross-chain bridge design: the trade-off between developer flexibility and security enforcement. LayerZero's architecture delegates security configuration to application teams, enabling rapid deployment but creating conditions where a single misconfigured parameter can expose hundreds of millions in assets. Chainlink's CCIP enforces multi-node verification at the infrastructure level, trading configurability for baseline security guarantees.
The $1 billion in asset migrations from LayerZero to Chainlink CCIP suggests the market is pricing in a preference for enforced security over flexible deployment. Whether this trend accelerates depends on whether additional protocols among the 47% still using 1-of-1 DVN configurations choose to migrate before, rather than after, the next exploit.
The Lazarus Group's continued targeting of bridge infrastructure — from Ronin in 2022 to Kelp DAO in 2026 — indicates that state-sponsored actors view cross-chain bridges as the highest-leverage attack surface in DeFi. Until bridge architectures eliminate single points of failure as a configurable option rather than treating them as a design choice, the sector remains structurally exposed.