6.9 Security LayerZero将KelpDAO高达29亿美元攻击归因于朝鲜Lazarus Group，攻击利用单验证者架构，LayerZero已加强安全措施。
LayerZero Labs及多份报告将近期KelpDAO遭受的攻击事件归因于朝鲜的Lazarus Group，尤其是其TraderTraitor子组织。此次攻击发生于2026年4月18日，攻击者利用KelpDAO的rsETH流动再质押代币采用的单验证者（DVN）架构漏洞。尽管LayerZero此前已建议采用多验证者架构，攻击者仍通过注入伪造区块链数据攻陷RPC节点，并发起DDoS攻击，迫使系统验证虚假交易，导致rsETH流通供应大幅减少。 LayerZero强调其协议本身并无缺陷，采用多DVN架构的应用未受影响。公司已暂停单验证者配置的签名与验证服务，并加快向多DVN架构迁移。此次事件凸显了加强安全措施和遵循推荐配置以防止类似攻击的重要性。
LayerZero Pins $292M KelpDAO Bridge Hack on North Korea’s Lazarus Group
LayerZero says North Korean Lazarus Group behind $292M Kelp DAO attack
LayerZero Links $292 Million Kelp DAO Bridge Exploit to North Korea’s Lazarus Group
LayerZero Team Explains the Reason Behind the Recent $290 Million Hack! Here Are the Details
LayerZero Blames Lazarus for $290M KelpDAO Hack, Cites Single-Point Design
LayerZero Team Accused North Korea of Hacking KelpDAO
LayerZero Ties KelpDAO Exploit to Lazarus Subgroup TraderTraitor
Breaking: LayerZero Confirms Kelp’s Laziness Led To Over $292M Hack
LayerZero Blames KelpDAO Team for Exploit, Links to DPRK’s Lazarus Group
LayerZero blames Kelp's setup for $290 million exploit, attributes it to North Korea's Lazarus
LayerZero Labs Addresses KelpDAO Attack Linked to Lazarus Group
