North Korea-linked hackers drained $578M from crypto in April, with Kelp DAO's $292M bridge exploit making up roughly half the total. LayerZero's postmortem pinned the Kelp hit on TraderTraitor, a Lazarus subgroup, after attackers compromised two RPC nodes and DDoS'd the clean ones to force a poisoned failover on the 1-of-1 verifier. Investigator Tanuki42 traced the attacker wallets back to the Bybit heist cluster — another month of proof that DPRK keeps owning DeFi's cross-chain infrastructure.

TLDR by @Benthic

More on Exploit

Comments