Over the past weekend, cybercriminals executed a staggering theft of more than $290 million in cryptocurrency from Kelp DAO, a platform designed to help users generate yields on their dormant crypto assets.
Accusations Fly: North Korea as the Main Suspect
By Monday, LayerZero, one of the projects impacted by the breach, pointed fingers at North Korea, asserting that the regime was responsible for the audacious heist. This incident has now been identified as the largest cryptocurrency theft of the year to date, surpassing an earlier incident at the crypto exchange Drift in April, which resulted in hackers making away with approximately $285 million.
How the Hack Was Executed
According to LayerZero’s statement on X, the attackers exploited Kelp DAO through its LayerZero bridge, a system that facilitates communication between different blockchains. The hackers capitalized on Kelp’s security framework, which failed to mandate multiple verifications for transaction approvals. This vulnerability allowed them to drain the funds through fraudulent transactions.
Preliminary Evidence Points to North Korean Hacking Group
The company referenced “preliminary indicators” suggesting North Korea’s involvement, specifically highlighting its notorious hacking group known as TraderTraitor, which specializes in targeting cryptocurrency.
Kelp DAO Defends Itself Against Blame
In a twist, Kelp DAO responded to LayerZero’s accusations by shifting the blame back, arguing that it was LayerZero’s default settings that contributed to the $290 million disaster.
North Korea’s Ongoing Crypto Theft Campaign
In recent years, hackers associated with Kim Jong Un’s regime have exhibited remarkable success in stealing cryptocurrency. In 2022 alone, North Korean hackers reportedly pilfered over $2 billion in crypto assets. Cumulatively, since 2017, the total amount of cryptocurrency believed to have been stolen by North Korea is estimated to be around $6 billion.
