Cryptocurrency

Galaxy

DeFi

LayerZero

Security

<p><strong>The KelpDAO hack has become one of the most scrutinized DeFi security incidents of 2025, exposing vulnerabilities in cross-chain infrastructure and raising urgent questions about how Web3 protocols safeguard user funds.</strong></p>
<h2 id="how-a-single-point-of-failure-drained-kelpdao">How a Single Point of Failure Drained KelpDAO</h2>
<p>The breach stemmed from a compromise of a LayerZero Decentralized Verifier Network (DVN), according to <a href="https://www.blockaid.io/blog/how-a-single-layerzero-dvn-compromise-drained-292m-from-kelpdao" rel="noopener noreferrer nofollow">a Blockaid analysis</a> that detailed how the exploit drained funds from the protocol. LayerZero published its own <a href="https://layerzero.network/blog/kelpdao-incident-statement" rel="noopener noreferrer nofollow">incident statement</a> outlining the timeline and scope of the breach.</p>
<p>The attack vector highlights a recurring problem in DeFi: cross-chain messaging layers that rely on a limited set of verifiers can become single points of failure. When one DVN was compromised, the attacker was able to execute unauthorized transactions against KelpDAO's contracts.</p>
<p>Galaxy Digital published <a href="https://www.galaxy.com/insights/research/kelpdao-layerzero-exploit-defi" rel="noopener noreferrer nofollow">research on the KelpDAO-LayerZero exploit</a>, framing it as a case study in how DeFi composability can amplify the blast radius of a single infrastructure failure.</p>
<div>
 <p>What to Know</p>
 <ul>
  <li><strong>The breach:</strong> A compromised LayerZero DVN was used to drain funds from KelpDAO, exposing weaknesses in cross-chain verification infrastructure.</li>
  <li><strong>Immediate impact:</strong> The incident prompted both KelpDAO and LayerZero to issue public statements and pause affected services while investigations continue.</li>
 </ul>
</div>
<h2 id="why-this-incident-points-to-a-sector-wide-problem">Why This Incident Points to a Sector-Wide Problem</h2>
<p>The KelpDAO exploit is not an isolated event. DeFi protocols that depend on external messaging and verification layers inherit the security posture of those dependencies. A protocol can pass multiple smart-contract audits and still fall to an operational compromise in its infrastructure stack.</p>
<p>This pattern echoes broader concerns raised by law enforcement. The FBI issued a <a href="https://www.fbi.gov/investigate/cyber/alerts/psa/north-korea-responsible-for-1-5-billion-bybit-hack" rel="noopener noreferrer nofollow">public service announcement attributing the $1.5 billion Bybit hack to North Korea</a>, underscoring that state-sponsored actors are actively targeting Web3 infrastructure. While there is no confirmed link between the KelpDAO incident and nation-state actors, the scale and sophistication of recent exploits suggest that protocol teams face threats well beyond typical smart-contract bugs.</p>
<p>For users, incidents like these erode confidence in DeFi's security model. Capital tends to flow toward protocols with stronger operational security track records, and repeated breaches across the sector could slow adoption. Projects such as <a href="https://bitcoininfonews.com/bitmine-surpasses-10-billion-in-staked-eth/" rel="noopener noreferrer nofollow">those managing billions in staked ETH</a> face particular scrutiny, as the value at risk continues to grow.</p>
<p>The conversation around Web3 security has also drawn attention from traditional finance. <a href="https://bitcoininfonews.com/standard-chartereds-sc-ventures-invests-in-gsr/" rel="noopener noreferrer nofollow">Institutional investors entering the crypto space</a> increasingly demand enterprise-grade security assurances before committing capital to DeFi protocols.</p>
<h2 id="what-users-and-protocol-teams-should-watch-next">What Users and Protocol Teams Should Watch Next</h2>
<p>The immediate priority is the publication of a full post-mortem from both KelpDAO and LayerZero. These reports should clarify the exact exploit path, the total value of funds affected, and whether any recovery or reimbursement is planned.</p>
<p>Users who interacted with KelpDAO should monitor official channels for instructions on wallet security and fund access. Until the investigation concludes, caution around any protocol that relied on the compromised DVN infrastructure is warranted.</p>
<p>Protocol teams across DeFi should treat this as a prompt to audit their own cross-chain dependencies. The incident demonstrates that security extends beyond smart-contract code to operational infrastructure, key management, and verifier selection. <a href="https://bitcoininfonews.com/philippines-fintech-revolution-summit-2026-opens-sponsorship-speaking-and-exhibition-opportunities/" rel="noopener noreferrer nofollow">Industry events focused on fintech and blockchain infrastructure</a> are likely to feature this incident as a case study in the months ahead.</p>
<p>Whether the KelpDAO hack leads to meaningful changes in how protocols select and monitor their infrastructure partners will determine whether it becomes a turning point for DeFi security, or another entry in a growing list of preventable exploits.</p>
<p>Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p>
<p><a href="https://bitcoininfonews.com/" rel="noopener noreferrer nofollow">Bitcoininfonews</a> first published the article titled <a href="https://bitcoininfonews.com/?p=36388" rel="noopener noreferrer nofollow">KelpDAO Hack Highlights Flaws in Web3 Security</a>.</p>

KelpDAO Hack Highlights Flaws in Web3 Security

Table of Contents

BitcoinInfoNews.Com

Other articles published on May 5, 2026

Join our free newsletter for daily crypto updates!