Over the weekend, hackers stole greater than $290 million in cryptocurrency from Kelp DAO, a protocol that permits customers to earn yields on idle crypto investments.
By Monday, LayerZero, one of many initiatives affected by the hack, accused North Korea of finishing up the heist. The hack is now the biggest crypto theft of the yr to this point, following an earlier hack at crypto alternate Drift in April that netted hackers round $285 million.
Per its submit on X, LayerZero mentioned the hackers exploited Kelp DAO through its LayerZero bridge, which permits totally different blockchains to ship directions to one another. The hackers then took benefit of Kelp’s personal safety configuration, which didn’t require a number of verifications earlier than approving transactions. That allowed the hackers to siphon off the funds with fraudulent transactions.
The corporate cited “preliminary indicators” that time to North Korea because the offender, particularly its hacking group that targets crypto referred to as TraderTraitor.
Kelp DAO responded to LayerZero blaming it for the theft as an alternative.
In the previous few years, North Korean hackers working for Kim Jong Un’s regime have change into extremely profitable at stealing crypto. Final yr, North Korean hackers stole greater than $2 billion in crypto. Total, since 2017, the entire quantity of stolen crypto by North Korea is alleged to be round $6 billion.
