Project
KelpDAO is a liquid restaking protocol that lets users stake ETH via EigenLayer and receive the liquid token rsETH in return.
Zscaler ThreatLabz says North Korea's TraderTraitor hid a malware loader inside a fake HashiCorp Terraform provider that runs the moment Terraform loads it. The crypto-theft group has pushed its operation into infrastructure-as-code, the tooling that provisions cloud environments.
Reality
Crypto hacks drained $766.49 million in September, a 2026 monthly record, and $387.5 million came from one breach of Bitget's hot wallets. After the money returned from the Liquid Network exploit, that one exchange accounts for about 80% of what stayed stolen.
Reality
Bitget CEO Gracy Chen publicly asked THORChain to refuse service to the wallets that took $387.5 million, after Circle and Tether stopped nearly $318,000. Much of the rest now depends on a no-KYC swap protocol that has declined to block stolen funds in earlier hacks, including its own.
Perspective Coverage
3 publishersReality
Bitget says attackers took over a wallet backend, faked transaction data and got the exchange's own authorization process to move $351.6 million out. No key was reported stolen, so the failure is in where the approvers got their facts.
Reality
Evercrest, the company behind KelpDAO, is suing LayerZero and CEO Bryan Pellegrino in British Columbia over the $292 million rsETH bridge exploit. Its negligence case rests on written 2024 assurances about a single verifier and on a risk warning it says LayerZero gave another customer.
Perspective Coverage
4 publishersReality
SentinelOne has documented North Korea's Jade Sleet inside a small Indian IT services provider, using Rust backdoors built for Apple Silicon and a Terraform lock file that points developers at a fake HashiCorp registry.
Reality
The Stable Token Commission's September 14 memo opens with a $292 million North Korea-linked bridge theft and ends with two access-control lapses under Wyoming's own token, 149 days after the attack that started the review.
Reality
Symbiosis halted BTC routing on September 11 after its BridgeV2 processed a bad message and generated more than 2^62 unbacked syBTC. The attacker realized about $336,000, roughly 1.5 times the average hack TRM counted this year.
Reality
Messari puts Morpho's outstanding loans at a record $5bn, with 95% of it stablecoin credit. About $1.3bn of that comes from Coinbase customers borrowing USDC against $2.5bn of cbBTC, and that prices out as a 52% loan-to-value book, not a leverage book.
Reality