The biggest DeFi story of the week was not a bug in a smart contract. It was a failure in the infrastructure around one. Chainalysis says attackers linked to North Korea's Lazarus Group stole roughly $292 million, or 116,500 rsETH, from KelpDAO's LayerZero bridge by compromising RPC nodes and exploiting a single-verifier setup.
The attack tricked the system into releasing funds against a non-existent burn on the source chain. To ordinary on-chain monitoring tools, the transactions looked valid. The weakness was in the cross-chain message verification stack, where off-chain data feeds and failover assumptions became the real attack surface.
A Bridge Lesson for the Whole Market
The exploit spread fear because rsETH was not isolated inside KelpDAO. It was used across lending and liquidity venues, which meant a bridge failure quickly became a collateral-quality problem for other protocols.
The lesson is uncomfortable for DeFi: composability multiplies both innovation and blast radius. Audited smart contracts are not enough when a protocol relies on cross-chain messages, RPC infrastructure and verifier configurations that can fail outside the code users see.