BBS:      TELESC.NET.BR
Assunto:  North Korea's Lazarus makes off with $290M crypto
De:       Mike Powell
Data:     Wed, 22 Apr 2026 08:12:24 -0500
-----------------------------------------------------------
North Korea's Lazarus makes off with $290M crypto in Kelp DAO heist after 
siphoning funds using fraudulent transactions

Date:
Tue, 21 Apr 2026 14:09:42 +0000

Description:
Lazarus Group tricked the system by taking control of some of the servers 
used to verify transactions

FULL STORY
The infamous North Korean 
state-sponsored hacking group, Lazarus, has done it again. It successfully 
walked away with $290 million in cryptocurrency, after seemingly exploiting a 
Decentralized Autonomous Organization called Kelp DAO through a solution 
called LayerZero. 

Kelp DAO is an organization that doesnt have central management, or a CEO. 
All of the decisions are made collectively by members who hold governance 
tokens and vote on proposals. It was designed to allow users to earn yield on 
idle crypto investments. LayerZero Labs, on the other hand, builds 
infrastructure that lets different blockchains communicate with each other. 
It is a vital part of the Web3 ecosystem, since different currencies operate 
on isolated networks. The DAO used LayerZero as a messaging layer between 
different blockchains.  Lazarus Group apparently tricked the system
by taking control of some of the servers used to verify transactions between 
blockchains. Then, they made fake transactions look real by feeding false 
data into the system and forcing it to trust the compromised servers, which 
allowed them to steal the funds. 

After the incident, LayerZero took to X to explain what happened. In an 
in-depth report which you can read here , it essentially said the attackers 
exploited Kelp DAOs setup. 

We have conducted a comprehensive review of active integrations on the 
LayerZero protocol. We can confirm with confidence that there is zero 
contagion to any other asset or application, LayerZero said. This incident 
was isolated entirely to KelpDAO's rsETH configuration as a direct 
consequence of their single-DVN setup. 

Kelp DAO, on the other hand, disagreed with the characterization that the 
incident was solely the result of its configuration.

While the two organizations shift blame around, Lazarus celebrates another 
successful heist. The organization has, for years, exploited vulnerable Web3 
projects, bridges and DAOs, to steal funds and finance North Koreas state 
apparatus and weapons programs. 

 Via TechCrunch

Link to news story:
https://www.techradar.com/pro/security/north-koreas-lazarus-makes-off-with-usd
290m-crypto-in-kelp-dao-heist-after-siphoning-funds-using-fraudulent-transacti
ons

$$
--- MultiMail/DOS
 * Origin: Capitol City Hub (1:2320/105)

-----------------------------------------------------------
[Voltar]