Hack

The Protocol: Kelp DAO exploited for $292 million
Also: DPRK hacking crypto, Aave contagion and Coinbase on quantum computing.

The $292 million Kelp DAO exploit shows why crypto bridges are still one of the industry's weakest links
The problem is structural and as long as bridges depend on complex systems with shared infrastructure and hidden trust assumptions, they will remain vulnerable.

Lazarus Group has become especially dangerous with new Mach-O Man attack: CertiK
North Korea's Lazarus Group has a new attack vector that allows it to exploit an apparently routine business call as a gateway into a target's systems.

Traders don’t see Kelp socializing losses after $292 million exploit
Polymarket prices low odds of a system-wide redistribution, as the protocol weighs how to handle an undercollateralized rsETH supply

Another DeFi protocol loses millions in hack days after KelpDAO breach
Volo Protocol lost about $3.5 million from three vaults holding WBTC, XAUm, and USDC.

Crypto's massive exploit may force big banks to rethink their blockchain plans, Jefferies warns
The $293 million Kelp DAO exploit has exposed critical infrastructure risks, leading Jefferies to suggest that traditional financial firms may pause their blockchain initiatives to prioritize security.

KelpDAO hackers are laundering millions in stolen crypto, data show
KelpDAO hackers are moving $290M in stolen crypto across blockchains, using privacy tools to mask the trail as DeFi contagion fears move through the sector.

North Korea’s crypto heist playbook is expanding and DeFi keeps getting hit
More than $500 million was siphoned across the Drift and Kelp exploits in just over two weeks. What once looked like isolated breaches now resembles a sustained campaign, likely driven by the financial needs of a sanctioned state.

Aave could face up to $230 million in losses after Kelp DAO bridge exploit triggers DeFi chaos
Aave published a report outlining two possible outcomes: around $123 million in losses if damage is shared across all rsETH, or up to $230 million if confined to Layer 2s, with the final impact depending on how Kelp DAO allocates the shortfall.

Kelp DAO claims LayerZero’s 'default' settings are what actually caused the massive $290 million disaster
The liquid restaking protocol said the compromised verifier was LayerZero's own infrastructure, and the setup it was faulted for running was LayerZero's onboarding default.

