LayerZero

Reported Context (3)

nonce authorization) and a $292M KelpDAO breach on April 18 (TraderTraitor, single-verifier flaw in a LayerZero bridge). AI Agent Deletes PocketOS Production Data as Roundup Covers Crypto Theft and Security Flaws
The attackers laundered funds through Tornado Cash, prompted rsETH contract freezes across Ethereum and L2s, and triggered an ongoing investigation by LayerZero and partners. KelpDAO Hit by $290 Million rsETH Theft; LayerZero Suspects Lazarus Group
as TraderTraitor (part of the Lazarus operation) exploited a single-verifier setup tied to Kelp and LayerZero, minting fake rsETH and using it as collateral to drain funds. Kelp Reports Nearly $290 Million Crypto Theft; LayerZero Cites Single-Verifier Setup

CVE (2)

People (4)

Threat Actors (4)

MITRE ATT&CK (3)

Vendors (10)

Products (19)

Tools (3)

Industries (3)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.