North Korea-linked hackers exploit vulnerabilities in DeFi protocols
- Over $500 million was stolen from crypto trading firm Drift and restaking protocol Kelp within two weeks.
- The Kelp exploit involved manipulating data inputs rather than breaking encryption, allowing false transactions to be approved.
- Kelp relied on a single verifier for cross-chain messages, which has been criticized for lacking sufficient security measures.
- Lending platforms like Aave are now facing losses due to the interconnected nature of DeFi assets.
- Experts emphasize that decentralization is a series of choices, highlighting vulnerabilities in the underlying infrastructure.
The recent exploits underscore a shift in hacking strategies, with attackers targeting foundational systems that facilitate asset movement across platforms. This evolution poses significant risks as known vulnerabilities remain unaddressed within the decentralized finance ecosystem.
The Kelp breach exemplifies how existing weaknesses can lead to substantial financial losses, as seen with over $500 million siphoned from multiple exploits.(Source)