techcrunch.com 1 day ago URGENCY: 7/10

North Korea's $290M Crypto Heist: What You Need to Know

North Korea has been accused of orchestrating a massive $290 million cryptocurrency theft from Kelp DAO. Discover how this hack unfolded and its implications for the crypto world.

North Korea's $290M Crypto Heist: What You Need to Know

Over the weekend, the cryptocurrency community was rocked by a staggering theft of over $290 million from Kelp DAO, a platform designed for earning yields on idle crypto investments. LayerZero, one of the projects impacted by the breach, has pointed fingers at North Korea, specifically its notorious hacking group known as TraderTraitor. This incident marks the largest crypto theft of 2026 so far, following another significant hack earlier this month that netted around $285 million from the crypto exchange Drift.

How the Hack Occurred

The hackers exploited vulnerabilities in Kelp DAO's LayerZero bridge, which facilitates communication between different blockchains. They took advantage of Kelp’s security configuration, which lacked stringent verification processes for transactions, allowing them to execute fraudulent transactions and siphon off funds with ease.

  • Key points about the hack:
    • Involvement of North Korean hackers, known for targeting crypto.
    • Kelp DAO's security flaws were exploited.
    • The total amount stolen by North Korea since 2017 is estimated at $6 billion.

As the crypto landscape continues to evolve, this incident serves as a stark reminder of the vulnerabilities that exist and the ongoing threat posed by state-sponsored hacking groups.