← Back to Delta Incident Archive

VERIFIED SECURITY INCIDENT · DCI-2026-002

Kelp DAO cross-chain validation incident

More than $290 million was reportedly transferred without authorization, with about $71 million frozen while the remainder moved across chains and obfuscation services.

Incident date2026-04-01 Attack typeBridge exploit SeverityCritical Involved chainsEthereum / Arbitrum / Bitcoin

After the cross-chain validation setup was compromised, the attacker transferred a large amount of assets without authorization. The Arbitrum Security Council later froze about $71 million, while the remainder moved through splitting, bridging, and obfuscation paths. Frozen and unrecovered amounts are tracked separately.