LayerZero attributed a $290 million exploit of KelpDAO’s cross-chain rsETH configuration to North Korea’s Lazarus Group on April 18, describing the attacker as a “highly-sophisticated state actor.” According to LayerZero, the incident was limited to KelpDAO’s rsETH setup and did not spread to other assets or applications using the protocol.
Exploit Mechanics and Attribution
LayerZero says the attack targeted downstream RPC infrastructure used by its Decentralized Verifier Network rather than exploiting the LayerZero protocol itself. The company states that compromised nodes have been replaced and the verifier network is back online. LayerZero attributes the attack to Lazarus Group and its TraderTraitor unit based on preliminary indicators.
Financial Impact on Aave
According to blockchain tracker LookonChain, the exploit led to roughly $292 million worth of rsETH being minted illegitimately. The attacker then used the token as collateral to borrow more than 82,600 Ether (ETH), worth about $195 million, from Aave.
The bad debt triggered large withdrawals from Aave, causing its total value locked (TVL) to fall by $6.28 billion in less than 48 hours, declining from $26.396 billion to $20.114 billion, according to LookonChain.
Major Withdrawals
LookonChain identified major withdrawals following the exploit:
- $431 million from MEXC
- $405.7 million from wallet 0x7CD0, possibly linked to Nonco
- $392 million from Abraxas Capital
Response and Remediation
Aave moved to freeze rsETH markets on V3 and V4 to prevent additional borrowing and deposits while evaluating options to cover any deficit.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Fluent Ethereum Layer 2 Mainnet Launches with BLEND Token and $50M Day-One Liquidity
Gate News message, April 25 — Fluent, an Ethereum-based Layer 2 network, activated its mainnet and launched its native BLEND token on Friday, April 25, bringing online a "blended execution" environment that enables applications written for different virtual machines to operate within the same
GateNews46m ago
ETH Liquidation Cascade: $761M in Short Positions at Risk Above $2,424
Gate News message, April 25 — According to Coinglass data, if Ethereum (ETH) breaks above $2,424, cumulative short position liquidations across major CEXs could reach $761 million.
Conversely, if ETH falls below $2,211, cumulative long position liquidations across major CEXs could reach $689 millio
GateNews2h ago
Grayscale Stakes 102,400 ETH Worth $237 Million
Gate News message, April 25 — Grayscale has staked 102,400 ETH, valued at approximately $237 million, according to a post by Trader That Martini Guy on April 25. The move represents one of the largest institutional Ethereum staking actions in recent times.
Ethereum staking reduces the circulating s
GateNews3h ago
Ethereum NFT Trading Volume Hits $3.93M in 24 Hours, BAYC Surges Over 266%
Gate News message, April 25 — According to CryptoSlam, Ethereum NFT trading volume reached $3.934 million over the past 24 hours, up 72.78%. BAYC led the market with over $1.45 million in trading volume, posting a 266.35% surge in 24-hour activity.
Courtyard generated approximately $980,000 in trad
GateNews4h ago
KelpDAO Recovers $43M in rsETH, Narrows Shortfall to 89,500 ETH
Gate News message, April 25 — KelpDAO announced progress on rsETH holder recovery efforts coordinated with Aave and ecosystem partners since April 18. The initial shortfall was 163,200 ETH; Kelp has recovered 40,300 rsETH (approximately 43,000 ETH), and the Arbitrum Security Council has secured an a
GateNews4h ago
Aave Proposes 25,000 ETH to DeFi United for Kelp DAO Exploit Relief
Aave service providers put forth a governance proposal on Friday to contribute 25,000 ETH—worth nearly $58 million—from the protocol's DAO to DeFi United, a coordinated relief effort to restore backing for rsETH following the Kelp DAO exploit. The proposed contribution would help close the
CryptoFrontier5h ago
