Product
rsETH
- First Reported
- Apr 20, 2026
- Latest Reported
- Apr 20, 2026
Reported Context (2)
- North Korean state-sponsored hackers, likely the Lazarus Group (TraderTraitor), stole about 116,500 rsETH — roughly $290–293 million — from the KelpDAO DeFi project by poisoning RPC nodes to forge cross-chain messages. KelpDAO Hit by $290 Million rsETH Theft; LayerZero Suspects Lazarus Group
- of the Lazarus operation) exploited a single-verifier setup tied to Kelp and LayerZero, minting fake rsETH and using it as collateral to drain funds. Kelp Reports Nearly $290 Million Crypto Theft; LayerZero Cites Single-Verifier Setup
Threat Actors (3)
MITRE ATT&CK (2)
Vendors (1)
Products (5)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.