What started as a worrying breach has turned into an open war of statements. LayerZero, the giant of interoperability, has dropped the bomb: they directly blame Kelp for the massive exploit that drained a whopping $290 million dollars.
But the story doesn't end there. We are not talking about a "bedroom hacker". LayerZero has named names (or rather, aliases) in the attack: the Lazarus Group. 🇰🇵
🔍 What really happened?
According to preliminary technical reports, the vulnerability was not in the LayerZero base protocol, but in a specific integration with Kelp contracts. Here we summarize the key points:
The Error: A failure in the configuration of Kelp's oracles allowed for massive price manipulation.
The Execution: The attackers drained funds in a matter of minutes, moving assets across multiple bridges to cover their tracks.
The Culprit in the Shadows: Analysis of on-chain addresses shows behavioral patterns identical to those previously used by the Lazarus Group, the cybercrime arm linked to North Korea.
"Security is a shared effort. We cannot allow poor integrations to jeopardize the liquidity of an entire ecosystem," stated a LayerZero spokesperson.
🛡️ Is your money safe?
If you are a user of Liquid Restaking protocols or use cross-chain bridges, it is time to audit your permissions. This event reminds us that, in the DeFi world, the chain is only as strong as its weakest link. 🔗
Kelp, for its part, is still in damage control mode, trying to verify if there is any possibility of fund recovery, although with Lazarus involved, hopes are usually low. 📉
💡 Conclusion: Education is your best defense
This $290 million attack marks a turning point in the security narrative of 2026. The sophistication of Lazarus continues to evolve, and protocols must raise their standards or perish in the attempt.
What do you think? Is LayerZero right to blame Kelp, or is it a strategy to clean its image? Leave your comment below! 👇
#LayerZero #KelpDAO #LazarusGroup #DeFiExploit #CryptoSecurity #BinanceSquare #BlockchainNews #Web3 🚨
