Scan to download
BTC $77,254.53 +1.05%
ETH $2,128.53 +1.02%
BNB $646.72 +1.31%
XRP $1.37 -0.03%
SOL $85.39 +1.41%
TRX $0.3580 +1.06%
DOGE $0.1038 +0.21%
ADA $0.2491 +0.29%
BCH $366.62 +0.33%
LINK $9.57 +0.82%
HYPE $51.54 +7.83%
AAVE $88.09 -0.13%
SUI $1.06 +0.39%
XLM $0.1435 -0.70%
ZEC $618.28 +10.72%
BTC $77,254.53 +1.05%
ETH $2,128.53 +1.02%
BNB $646.72 +1.31%
XRP $1.37 -0.03%
SOL $85.39 +1.41%
TRX $0.3580 +1.06%
DOGE $0.1038 +0.21%
ADA $0.2491 +0.29%
BCH $366.62 +0.33%
LINK $9.57 +0.82%
HYPE $51.54 +7.83%
AAVE $88.09 -0.13%
SUI $1.06 +0.39%
XLM $0.1435 -0.70%
ZEC $618.28 +10.72%

LayerZero releases KelpDAO security incident report: will adjust security policies and rebuild affected cloud infrastructure

2026-05-20 21:16:44
Collection

LayerZero Labs released a report on the KelpDAO attack incident, confirming that the KelpDAO rsETH cross-chain bridge built on its cross-chain communication protocol was attacked, resulting in the theft of approximately 116,500 rsETH (about $292 million). Several security agencies, including Mandiant, CrowdStrike, and independent researchers, attributed the attack to the North Korean-related hacker group TraderTraitor (UNC4899).

The report indicates that the attack began on March 6, 2026, when the attackers used social engineering techniques to compromise a LayerZero developer account, obtain session keys, and infiltrate the RPC cloud environment, further contaminating internal RPC node data and manipulating return results to deceive monitoring systems and the decentralized verification network (DVN).

LayerZero Labs officially announced that it will adjust its security strategy, including no longer allowing its DVN to act as the sole signer in a single validation configuration, while also rebuilding the affected cloud infrastructure and introducing short-term credentials, instant permission upgrades, and multi-party approval mechanisms to enhance security.

app_icon
ChainCatcher Building the Web3 world with innovations.