On April 18, 2026, Kelp DAO's rsETH bridge was exploited for $293 million when attackers compromised LayerZero's RPC nodes via social engineering and injected fraudulent cross-chain messages. Kelp's 1-of-1 verifier configuration created a single point of failure, affecting validation across 20 chains. The attack was attributed to Lazarus Group.