Teoram logo
Teoram
Predictive tech intelligence
emergingstabilizingCrypto & Web3

Lazarus Group Executes $290M Heist on Kelp DAO

The Lazarus Group, linked to North Korean state-sponsored cyber operations, has stolen $290 million in cryptocurrency from Kelp DAO by hijacking transaction verification servers. This incident marks the largest crypto heist of 2026, underlining the heightened threat posed by state actors in the blockchain sector.

What is happening

Aave could face up to $230 million in losses after Kelp DAO bridge exploit triggers DeFi chaos

Repeated reporting is beginning to cohere into a trackable narrative.

Momentum
75%
Confidence trend
89%0
First seen
21 Apr 2026, 9:16 am
Narrative formation start
Last active
20 Apr 2026, 9:03 pm
Latest confirmed movement
Supporting signals

Evidence that is shaping the theme

These clustered signals are the repeated pieces of reporting that formed the theme. Read them as the evidence layer beneath the broader narrative.

Crypto & Web3Confidence 87%1 sources20 Apr 2026, 9:03 pm

Aave could face up to $230 million in losses after Kelp DAO bridge exploit triggers DeFi chaos

Aave published a report outlining two possible outcomes: around $123 million in losses if damage is shared across all rsETH, or up to $230 million if confined to Layer 2s, with the final impact depending on how Kelp DAO allocates the shortfall.

CoinDesk
Related articles

Research briefs behind this theme

Open the article-level analysis that gives this theme its evidence, timing, and scenario framing.

Crypto & Web3Research Briefmedium impact

Lazarus Group Executes $290M Heist on Kelp DAO

The successful breach of Kelp DAO's system signifies increasing sophistication in cybercriminal tactics, particularly from state-backed groups like Lazarus, which may disrupt the security landscape of decentralized finance platforms.

What may happen next
This incident could lead to enhanced scrutiny and regulatory measures in the crypto and DeFi sectors, particularly focused on transaction validation and server security.
Signal profile
Source support 60% and momentum 62%.
High confidence | 95%2 trusted sourcesWatch over 12-24 monthsmedium business impact
Crypto & Web3Research Briefmedium impact

Aave could face up to $230 million in losses after Kelp DAO bridge exploit triggers DeFi chaos

Multiple trusted reports are pointing to the same directional technology shift, suggesting the market should read this as a category signal rather than isolated headline activity.

What may happen next
Prediction says this signal will translate into sharper competitive positioning over the next two quarters.
Signal profile
Source support 45% and momentum 85%.
High confidence | 87%1 trusted sourceWatch over 2 to 6 weeksmedium business impact
Crypto & Web3Research Briefmedium impact

2026's biggest crypto exploit: $292 million gets drained from Kelp DAO with wrapped ether stranded across 20 chains

Multiple trusted reports are pointing to the same directional technology shift, suggesting the market should read this as a category signal rather than isolated headline activity.

What may happen next
Prediction says this signal will translate into sharper competitive positioning over the next two quarters.
Signal profile
Source support 60% and momentum 55%.
High confidence | 95%2 trusted sourcesWatch over 2 to 6 weeksmedium business impact
Crypto & Web3Research Briefmedium impact

Nearly $1 billion in bitcoin ETF inflows power bull case as Kelp hack fuels DeFi jitters

Multiple trusted reports are pointing to the same directional technology shift, suggesting the market should read this as a category signal rather than isolated headline activity.

What may happen next
Prediction says this signal will translate into sharper competitive positioning over the next two quarters.
Signal profile
Source support 45% and momentum 96%.
High confidence | 86%1 trusted sourceWatch over 2 to 6 weeksmedium business impact
Lazarus Group Executes $290M Heist on Kelp DAO Trend Analysis & Market Signals | Teoram | Teoram