The Lazarus Group, linked to North Korean state-sponsored cyber operations, has stolen $290 million in cryptocurrency from Kelp DAO by hijacking transaction verification servers. This incident marks the largest crypto heist of 2026, underlining the heightened threat posed by state actors in the blockchain sector.
2026's biggest crypto exploit: $292 million gets drained from Kelp DAO with wrapped ether stranded across 20 chains
Repeated reporting is beginning to cohere into a trackable narrative.
These clustered signals are the repeated pieces of reporting that formed the theme. Read them as the evidence layer beneath the broader narrative.
An attacker drained 116,500 rsETH, roughly 18% of circulating supply, from Kelp's LayerZero-powered bridge on Saturday, triggering emergency freezes across Aave, SparkLend, Fluid and Upshift.
Open the article-level analysis that gives this theme its evidence, timing, and scenario framing.
The successful breach of Kelp DAO's system signifies increasing sophistication in cybercriminal tactics, particularly from state-backed groups like Lazarus, which may disrupt the security landscape of decentralized finance platforms.
Multiple trusted reports are pointing to the same directional technology shift, suggesting the market should read this as a category signal rather than isolated headline activity.
Multiple trusted reports are pointing to the same directional technology shift, suggesting the market should read this as a category signal rather than isolated headline activity.
Multiple trusted reports are pointing to the same directional technology shift, suggesting the market should read this as a category signal rather than isolated headline activity.
