LayerZero Reports Attack on KelpDAO's Cross-Chain Bridge

LayerZero has released an incident report detailing an attack on the KelpDAO rsETH cross-chain bridge on April 18, 2026. According to Foresight News, the attack resulted in the loss of approximately 116,500 rsETH. Mandiant and CrowdStrike have attributed the attack to the North Korean hacker group TraderTraitor (UNC4899). The attackers reportedly began their operation in March by obtaining developer session keys through social engineering. They infiltrated the LayerZero RPC cloud environment, altered RPC node data, and launched a DoS attack on external RPC services. This led the DVN to rely solely on compromised node signatures, allowing the attackers to forge cross-chain messages.