LayerZero Labs KelpDAO Incident Report

ahboyashreads (@ahboyashreads), May 20, 2026, 14:03 UTC

LayerZero Labs KelpDAO Incident Report North Koreans socially engineered a LayerZero dev to compromise internal RPC nodes and execute a DoS attack, forcing the protocol to sign a forged message that drained $292 million from KelpDAO due to its vulnerable single-verifier setup LayerZero Labs has now completely rebuilt its cloud infra with strict access controls, and changed its operating stance so its Decentralized Verifier Network will no longer sign as the sole required validator on any channel http://layerzero.network/blog/layerzero-labs-kelpdao-incident-report

The excerpt is quoted from a public Telegram channel, which owns its text.

Read the original post on Telegram

More posts from ahboyashreads · All channels

FixLane Live vulnerabilities with ready fix prompts