North Korean Lazarus Group Suspected in $290 Million KelpDAO Cryptocurrency Hack
North Korea's Lazarus group is suspected of orchestrating a $290 million cryptocurrency theft from KelpDAO, marking 2026's largest known crypto exploit. The heist occurred on April 18, 2026, when Ethereum was drained from KelpDAO's vault. During the attack, two blockchain servers hosted by crypto tech application LayerZero were compromised, as confirmed by KelpDAO on Tuesday. Digital currency news site CoinDesk reported this as the biggest cryptocurrency heist of the year so far. LayerZero stated that KelpDAO was exploited for approximately US$290 million. The incident highlights vulnerabilities in digital asset platforms amid growing cyber threats.
Key facts
- North Korea's Lazarus group is suspected of the theft
- The theft amounted to approximately US$290 million
- The heist occurred on April 18, 2026
- Ethereum was drained from KelpDAO's vault
- This is 2026's biggest known cryptocurrency exploit so far
- Two blockchain servers hosted by LayerZero were compromised
- KelpDAO confirmed the hack on Tuesday
- CoinDesk reported on the incident
Entities
Institutions
- Lazarus
- KelpDAO
- CoinDesk
- LayerZero
Locations
- North Korea