LayerZero said the attackers compromised two RPC nodes the company's verifier relied on and DDoS'd the rest, with the attack working only because Kelp had ignored multi-verifier recommendations.
LayerZero blames Kelp’s setup for $290 million exploit, attributes it to North Korea’s Lazarus
April 20, 2026