Attackers drained 116,500 rsETH worth approximately $290 million from KelpDAO’s LayerZero-powered bridge on April 18 in 2026’s largest DeFi exploit to date.LayerZero has attributed the attack with preliminary confidence to North Korea’s Lazarus Group, specifically its TraderTraitor subunit.The fallout triggered over $13 billion in outflows from DeFi platforms including Aave, which froze rsETH markets on both its V3 and V4 deployments.