Defi Exploit
Investigations tagged with this subject. A topic describes what a page is about — an attack type, a jurisdiction, a regulator, a named actor — as distinct from the source that produced it.
2 investigations on this topic
KelpDAO is a liquid restaking protocol that issues rsETH, launched in late 2023 by the team behind Stader Labs. In April 2026 its LayerZero-based rsETH bridge was exploited for roughly $292 million (116,500 rsETH); LayerZero preliminarily attributed the attack to North Korea's Lazarus Group (TraderTraitor), and TRM Labs also attributes it to a North Korean actor. Kelp and LayerZero publicly dispute responsibility for the bridge configuration, and a DeFi-industry recovery effort (DeFi United) restored rsETH backing within weeks while a legal claim over frozen funds remained unresolved in sources found.
avoid.net/hypurr-nfts→64/100[CAUTIONARY]Hypurr NFTs are a 4,600-piece cat-themed NFT collection airdropped by the Hyper Foundation on September 28, 2025, to early Hyperliquid users who participated in the November 2024 Genesis Event. On the day of launch, blockchain investigator ZachXBT flagged the theft of eight Hypurr NFTs from compromised HyperEVM wallets, yielding approximately $400,000 in profit for the attacker. The collection itself is a legitimate product of the Hyper Foundation, but the incident exposed wallet security vulnerabilities in the HyperEVM ecosystem and coincided with a broader pattern of exploits across Hyperliquid-based protocols in late September 2025.