North Korea linked to $578m in crypto thefts after Kelp DAO exploit

North Korea-linked cyber actors were tied to cryptocurrency thefts exceeding $578m in April, following a major exploit involving Kelp DAO, underscoring the growing scale and sophistication of attacks targeting decentralised finance and digital asset platforms.

April surge driven by major exploit

Security analysts attribute a significant portion of April’s losses to the Kelp DAO exploit, which exposed vulnerabilities in decentralised finance (DeFi) infrastructure. The incident is part of a broader wave of attacks that have impacted protocols, exchanges and individual users.

The cumulative figure of more than $578m marks one of the highest monthly totals recorded, highlighting the intensifying threat landscape across the crypto ecosystem.

State-linked actors under scrutiny

Investigations suggest that groups associated with North Korea were responsible for a substantial share of the thefts. These actors have previously been linked to coordinated cyber campaigns targeting digital assets as a source of foreign currency.

The use of advanced hacking techniques, including smart contract manipulation and phishing campaigns, reflects a high level of technical capability and organisation.

Expanding attack surface across platforms

The latest incidents demonstrate how vulnerabilities are emerging across multiple layers of the crypto sector. DeFi protocols remain a primary target due to their open architecture, but attacks are increasingly extending to centralised platforms and end users.

Security gaps in smart contracts, combined with insufficient user safeguards, continue to create entry points for exploitation.

Regulatory and security concerns intensify

The scale of the thefts is likely to accelerate regulatory scrutiny of the crypto industry. Authorities in multiple jurisdictions have already signalled the need for stronger oversight, particularly around compliance, risk management and cybersecurity standards.

Industry participants are also under pressure to improve auditing processes and implement more robust defensive measures.

Implications for market confidence

Large-scale breaches can undermine investor confidence, particularly among retail participants. While the crypto market has shown resilience to previous incidents, repeated high-value exploits may affect adoption and capital inflows over time.

At the same time, the situation reinforces the importance of security as a central pillar of the sector’s long-term viability.

Outlook for the sector

As attacks become more sophisticated, the industry is expected to prioritise security innovation and collaboration between platforms, regulators and cybersecurity firms. Preventing future losses will depend on both technological solutions and improved governance frameworks.

The April surge in thefts serves as a stark reminder that as digital finance expands, so too does the scale of the risks associated with it.

Newshub Editorial in Asia – April 23, 2026