LayerZero attributed a $290 million exploit of KelpDAO’s cross-chain rsETH configuration to North Korea’s Lazarus Group on April 18, describing the attacker as a “highly-sophisticated state actor.” According to LayerZero, the incident was limited to KelpDAO’s rsETH setup and did not spread to other assets or applications using the protocol.
Exploit Mechanics and Attribution
LayerZero says the attack targeted downstream RPC infrastructure used by its Decentralized Verifier Network rather than exploiting the LayerZero protocol itself. The company states that compromised nodes have been replaced and the verifier network is back online. LayerZero attributes the attack to Lazarus Group and its TraderTraitor unit based on preliminary indicators.
Financial Impact on Aave
According to blockchain tracker LookonChain, the exploit led to roughly $292 million worth of rsETH being minted illegitimately. The attacker then used the token as collateral to borrow more than 82,600 Ether (ETH), worth about $195 million, from Aave.
The bad debt triggered large withdrawals from Aave, causing its total value locked (TVL) to fall by $6.28 billion in less than 48 hours, declining from $26.396 billion to $20.114 billion, according to LookonChain.
Major Withdrawals
LookonChain identified major withdrawals following the exploit:
- $431 million from MEXC
- $405.7 million from wallet 0x7CD0, possibly linked to Nonco
- $392 million from Abraxas Capital
Response and Remediation
Aave moved to freeze rsETH markets on V3 and V4 to prevent additional borrowing and deposits while evaluating options to cover any deficit.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Machi Big Brother Holds $86M in BTC and ETH, Down $73.44M Over Past 6 Months
Gate News message, April 27 — According to Arkham monitoring, Machi Big Brother (Huang Lixing) is currently holding $44.2 million in BTC and $41.8 million in ETH long positions on-chain, totaling $86 million.
Over the past six months, the investor has incurred trading losses of $73.44 million in
GateNews1h ago
User FilmStar Purchases 2 BAYC NFTs for 35 ETH Worth $81,500
Gate News message, April 27 — User FilmStar purchased two Bored Ape Yacht Club (BAYC) NFTs for a combined 35 ETH, valued at approximately $81,500, according to OpenSea data. BAYC5617 sold for 10 ETH, while BAYC4593 fetched 25 ETH in the transaction two hours ago.
The address currently holds 1.3
GateNews3h ago
Dormant Whale Deposits 2,301 ETH Worth $5.5M to Major CEX After 3-Year Silence
Gate News message, April 27 — According to Onchain Lens, a whale that has been dormant for three years deposited its entire holdings of 2,301 ETH, valued at approximately $5.5 million, to a major centralized exchange today.
The transfer marks the first significant activity from the address in three
GateNews3h ago
DeFi United’s crowdfunding campaign raises 102,000+ ETH, with AAVE rebounding to $100
According to the official DeFi United page, the multi-protocol relief fund DeFi United, initiated and led by Aave service providers, has raised more than 102k ETH as of April 27. The goal is to cover the bad-debt shortfall created in the Aave V3 market after the April 18 Kelp DAO cross-chain bridge attack incident. AAVE briefly broke above $100 before falling back.
MarketWhisper4h ago
Ethereum Spot ETFs Post $155M Net Inflows Last Week, Extending Three-Week Streak
Gate News message, April 27 — Ethereum spot ETFs recorded net inflows of $155 million during last week's trading days (April 20-24, Eastern Time), according to SoSoValue data, extending a three-week streak of net inflows.
BlackRock's ETHA led all funds with $138 million in weekly net inflows,
GateNews5h ago
Aave Labs proposes for Arbitrum: unlock 30,765 ETH in compensation for victims
According to a proposal published by Aave Labs on April 25 on the Arbitrum governance forum, Aave Labs asks the Arbitrum decentralized autonomous organization (DAO) to unfreeze 30,765 ETH associated with the Kelp DAO attack and to transfer the above funds to the “DeFi United” Recovery Fund, to restore support for rsETH and compensate holders.
MarketWhisper5h ago
