Coinmarketcap LayerZero Faces Fallout from KelpDAO Exploit, ZRO Token Drops
Article Content
- •LayerZero's infrastructure was exploited in a major DeFi hack, leading to a $292-293 million loss.
- •ZRO token dropped 3.05% amid governance backlash and upcoming token unlock.
- •DeFi protocols are mobilizing funds to compensate exploit victims, increasing pressure on LayerZero.
LayerZero's token (ZRO) dropped by 3.05% due to the fallout from the KelpDAO rsETH bridge exploit, which occurred on April 18-19, 2026, resulting in a loss of approximately $292-293 million. The exploit released 116,500 unbacked rsETH and triggered significant outflows across DeFi protocols that utilized LayerZero's infrastructure. This incident is noted as the largest DeFi hack of 2026, with multiple post-mortems linking it to a single Decentralized Verifier Network (DVN) configuration. In response, major DeFi protocols, including Aave and Compound, have proposed using their treasuries to compensate affected users, further highlighting LayerZero's perceived responsibility. The ongoing controversy and governance discussions have kept LayerZero in the spotlight, negatively impacting ZRO's market performance. Additionally, a scheduled token unlock on April 26, 2026, involving $40.4 million worth of ZRO, is contributing to market anxiety. Overall, the sentiment surrounding LayerZero remains bearish as the market reassesses its security and reputational risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track KelpDAO in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…