Wu said that LayerZero disclosed in a post that on April 18, 2026, KelpDAO suffered an attack resulting in losses of approximately $290 million. Initial attribution points to North Korea’s DPRK Lazarus Group (TraderTraitor). The attack polluted the downstream RPC used by the DVN and, together with a DDoS, triggered a failover, causing the DVN to confirm that no transactions occurred. It did not take advantage of any protocol or key vulnerabilities.

The incident arose from KelpDAO using a 1/1 single DVN configuration, leading to a single point of failure. The impact was limited to rsETH only and did not propagate to other assets or applications. The affected RPC has been replaced, and LayerZero Labs’ DVN has resumed operation.