The KelpDAO exploit, orchestrated by the North Korean Lazarus Group, resulted in the creation of $228 million in bad debt on the Aave protocol through the minting of fraudulent restaked ETH. Arkham Intelligence identified the attack by tracking the Lazarus Group’s characteristic laundering patterns via ThorChain. In a rare and controversial move, the Arbitrum Security Council utilized a Layer 1 "forced inclusion" mechanism to freeze $71 million in stolen assets, preventing their further movement. This intervention underscores the ongoing tension within decentralized finance between maintaining protocol immutability and implementing emergency measures to protect users. The incident serves as a critical case study on the efficacy of security councils, the risks of composable "money Legos," and the evolving social consensus required to manage systemic threats in decentralized ecosystems.
Sign in to continue reading, translating and more.
Continue