Kelp DAO — $292M drained via forged LayerZero messages after RPC node compromise and coordinated DDoS
Lazarus Group compromised LayerZero's internal RPC nodes, orchestrated a simultaneous DDoS on third-party nodes, and exploited Kelp's single-verifier bridge configuration to release 116,500 rsETH against a burn that never happened.