ChainHintbeta
    Recent hacks/Kelp
    Kelp

    Kelp Hack:$293M Stolen

    April 18, 2026 · Ethereum

    Reported by DeFiLlama

    As of 2026-10-11 14:31 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.

    Estimated Loss$293M
    ChainEthereum
    DateApril 18, 2026
    Attack typeBridge exploit

    Attacker address

    Verified by ChainHint · 2026-09-18

    0x8b1b6c9a6db1304000412dd21ae6a70a82d60d3b

    On-chain check: eth_getTransactionReceipt: status 1, block 24908285, 2026-04-18 17:35:35 UTC; rsETH (0xa1290d69…e5a7) Transfer 116,500 from KelpDAO rsETH OFT adapter 0x85d456b2…8ef3 to 0x8b1b6c9a…0d3b

    Exploit transaction: 0x1ae232da…09db4222

    Sources: defiprime.com

    Receiving address of the unbacked rsETH release (LayerZero 1-of-1 DVN spoofing). Attribution to Lazarus per press; not claimed here.

    Traced by ChainHint — Traced Outflow

    $666Mreached 274 endpoints

    302 nodes · 1437 edges

    Largest destinations: KelpDAO Exploiter 2026, aave, Compound, FluidLiquidityProxy, uniswap — as labelled in our database; not all of these labels are verified.

    In ChainHint's incident archive

    No earlier incident at Kelp is recorded in our archive.

    Bridge exploit — 8 incidents of this kind in the 90 days before this page was built, $345M in total, among the incidents ChainHint lists.

    Kelp hack: the facts

    How much was stolen in the Kelp hack?
    DeFiLlama reports $293M stolen from Kelp on ethereum.
    Who was hit in the Kelp hack?
    Kelp, on ethereum, on April 18, 2026. Attack type: bridge exploit.
    Where did the Kelp funds go?
    ChainHint traced $666M to 274 endpoints, including KelpDAO Exploiter 2026, aave, Compound (as labelled; not all labels are verified).

    Related hacks

    All hacks →

    Investigate your own incident

    Trace the path of funds across 12 chains on public blockchain data.