KelpDAO suffers RPC node attack, resulting in a loss of approximately $290 million

Techub News reports, according to cryptobriefing.com, that KelpDAO was targeted by an RPC node poisoning attack on April 18, 2026. The hackers compromised internal RPC nodes to forge destruction events and stole approximately 116.5k rsETH (worth about $290 million). The attack exploited a “1-of-1” single-point verification vulnerability and did not involve smart contract code flaws. The attack has been attributed to North Korea’s Lazarus Group’s sub-organization TraderTraitor. Following the incident, multiple DeFi protocols urgently paused rsETH trading, with the total value locked (TVL) in the DeFi ecosystem estimated to have lost between $116.5k and $13 billion. This event exposed the centralization risks of cross-chain bridge infrastructure, prompting the industry to reassess the security of verification architectures.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned