Kelp is a apt_group tracked across 8 threat clusters and 12 intelligence report mentions on ThreatCluster. First observed November 8, 2025; most recent activity May 11, 2026.
On May 5, 2026, Ripple announced it will share internal threat intelligence regarding North Korean hackers with Crypto ISAC, aimed at enhancing security across the cryptocurrency industry. This initiative follows a…
A U.S. federal court has issued a restraining notice preventing Arbitrum DAO from transferring 30,766 ETH (approximately $71.1 million) that was frozen following the Kelp DAO exploit, which resulted in a loss of $292…
On April 18, 2026, a $292 million exploit targeted KelpDAO's rsETH token, exploiting a vulnerability in its LayerZero bridge configuration. Attackers redeemed unbacked rsETH tokens on Ethereum and used them as…
On April 18, 2026, Kelp DAO's LayerZero-powered cross-chain bridge was exploited, resulting in the theft of 116,500 rsETH, valued at approximately $293 million. The attacker utilized a forged cross-chain message to…
Vercel has confirmed a security breach resulting from unauthorized access to its internal systems, affecting a limited subset of customers. The breach was traced back to a compromised third-party AI tool, Context.ai,…
Following the Kelp security incident, Tether's asset interoperability protocol USDT0 has revealed its security architecture. The system employs a proprietary Decentralized Verification Network (DVN) requiring a 3/3…
Aave's DeFi United relief fund has secured $303 million to cover the $292 million losses from the Kelp DAO exploit that occurred on April 18, 2026. The fund aims to stabilize affected DeFi protocols and mitigate forced…
A Chinese-linked cyberespionage group has targeted U.S. government and policy-related officials using Venezuela-themed phishing emails. The campaign aims to compromise sensitive information and gain long-term access to…