Leaderboard
16All-time rank
Kelp
Apr 18, 2026
$293M
Lost
$293M
Recovered
$0
Net loss
$293M
Unrecovered0% recovered
On April 18, 2026, Kelp DAO's rsETH bridge was exploited for $293 million when attackers compromised LayerZero's RPC nodes via social engineering and injected fraudulent cross-chain messages. Kelp's 1-of-1 verifier configuration created a single point of failure, affecting validation across 20 chains.
The attack was attributed to Lazarus Group.
- Target
- Bridge
- Classification
- Bridge & Cross-Chain
- Technique
- Cross-Chain Message Spoofing
- Attribution
- Unknown
- Chains
EthereumArbitrum
Event timeline
- Apr 18, 2026Exploit executed — $293M drained via cross-chain message spoofing
- Attributed to Unknown
- Recovery status Unrecovered 0%