LayerZero says preliminary indicators level to North Korea’s Lazarus Group, particularly the TraderTraitor subgroup, because the probably actor behind the KelpDAO exploit on April 18, 2026.
The theft now ranks as the biggest decentralized finance (DeFi) lack of 2026. It overtakes the $285 million Drift Protocol breach from April 1, which investigators additionally tied to state-backed North Korean actors.
North Korea Suspected in The Greatest Crypto Lack of 2026
In a put up on X (previously Twitter), LayerZero outlined the mechanics of the incident, describing it as a “extremely subtle assault.”
“On April 18, 2026, LayerZero Labs’ DVN grew to become the goal of a extremely subtle assault, probably attributable to the Lazarus Group, extra particularly TraderTraitor.” the put up learn. “The assault was particularly engineered to control or poison downstream RPC infrastructure by compromising a quorum of the RPCs the LayerZero Labs DVN relied upon to confirm transactions. It was not completed via an exploit to the protocol, DVN, key administration, or different means.”
The attribution aligns with a broader pattern of more and more advanced cyber operations tied to North Korean actors. Earlier this month, Drift Protocol (DRIFT) revealed that its $285 million exploit on April 1 adopted a six-month marketing campaign additionally linked to state-backed entities.
US authorities have beforehand related the identical group to main incidents, together with the $1.5 billion Bybit hack in February 2025. Information from Chainalysis additional highlights the size of the menace.
The agency revealed that North Korea-linked hackers stole a report $2.02 billion from crypto platforms in 2025, a 51% enhance year-over-year, largely pushed by the Bybit breach.
Comply with us on X to get the newest information because it occurs
Market Fallout Spreads Throughout DeFi
Belief throughout the DeFi sector has taken a visual hit for the reason that breach. Lookonchain reported that Aave’s whole worth locked (TVL) fell to $17.947 billion, shedding $8.45 billion over the prior two days.
Nonetheless, DeFi-wide publicity proved bigger. Mixed TVL throughout all chains slid from $99.497 billion to $86.286 billion, a $13.21 billion decline.
Aave’s native token AAVE dropped 3.84% prior to now 24 hours after dropping roughly 20% on Sunday. BeInCrypto highlighted that whales offloaded greater than $6 million in tokens after the KelpDAO exploit.
The put up LayerZero Ties KelpDAO Exploit to Lazarus Subgroup TraderTraitor appeared first on BeInCrypto.