Lazarus Exploits Kelp for $290M, Aave Liquidity Crunch Spreads

North Korea's Lazarus group pulled off the largest DeFi exploit of 2026 over the weekend, draining $290 million from Kelp DAO through a vulnerability that should not have existed. The fallout is still moving through on-chain lending markets, with Aave absorbing a $300 million borrowing spike as stablecoin liquidity tightens across the board. Total value locked across DeFi dropped 7% in 24 hours to $86 billion.

ETH sits at $2,304.97, down 0.62% on the day, pressured by the exploit aftermath and fresh geopolitical risk from Iran reimposing controls on the Strait of Hormuz.

The Kelp Exploit and Its Aftershocks

LayerZero attributed the Kelp DAO attack to North Korea's Lazarus group and placed blame squarely on Kelp's single-point infrastructure setup. The attackers compromised two RPC nodes that LayerZero's verifier relied on and DDoS'd the remaining nodes. LayerZero said the attack succeeded only because Kelp had ignored repeated recommendations to adopt a multi-verifier configuration.

The $290 million loss cascaded quickly. A $300 million borrowing spike hit Aave as traders scrambled for stablecoin liquidity, a stress event that revealed second-order fragility in DeFi lending markets. Stablecoin rates spiked on the platform, and the aftershocks are still propagating in ways that were not immediately visible on Saturday.

The broader DeFi sector bled 7% of its TVL in a single day, falling to $86 billion according to DefiLlama. Altcoins took the brunt of the sentiment damage, while Bitcoin's 1.6% pullback to $74,335 was comparatively modest (though the CoinDesk report references BTC price, suggesting a parallel move across risk assets).

Polymarket Chases a $15 Billion Valuation

Polymarket is in talks to raise $400 million at a $15 billion valuation, a figure that would make it one of the most valuable crypto-native companies globally. The number still falls short of competitor Kalshi, which hit a $22 billion valuation in its latest funding round. Prediction markets have become one of the few crypto sectors where growth has outpaced the broader market downturn, driven by sustained interest in political and macro event betting.

Coinbase Bets on AI Agents, Expands Lending

Coinbase is running two experiments worth watching. The first: AI agents modeled on former executives Fred Ehrsam and Balaji Srinivasan, deployed internally via Slack and email to give staff high-level strategic feedback. CEO Brian Armstrong said he expects AI agents will outnumber human employees at Coinbase "very soon" and will transact on-chain more than people do.

The second move is geographic expansion. Coinbase opened USDC borrowing to UK users, allowing loans up to $5 million collateralized against Bitcoin, ETH, and cbETH. The lending runs through Morpho on Base, further embedding Coinbase's L2 as a financial services layer rather than just a transaction chain.

Vercel Breach Puts Crypto Frontends on Alert

Vercel, the cloud platform that hosts frontends for a significant share of crypto applications, confirmed a security breach after a hacker put the company's data up for sale on a forum for $2 million. CEO Guillermo Rauch described the attackers as "highly sophisticated" and AI-powered. The incident compromised some customer credentials.

Separately, hackers impersonated the eth.limo team to hijack its domain through a social engineering attack on registrar EasyDNS. The eth.limo incident is a reminder that DNS remains one of the weakest links in the Ethereum user experience, sitting outside the trust model of the protocol itself.

BIS Fires a Shot at Dollar Stablecoins

Bank for International Settlements general manager Pablo Hernández de Cos warned that U.S. dollar stablecoins could strain banks and complicate monetary policy, urging stronger global regulatory coordination. The statement lands at a moment when stablecoin issuance is at all-time highs and stablecoins are increasingly embedded in DeFi lending, cross-border payments, and emerging-market savings.

The BIS framing positions stablecoins as a macro risk rather than a niche fintech product. For issuers like Tether and Circle, the regulatory trajectory matters more than the rhetoric, but coordinated global rules would reshape how both companies manage reserves and operate across jurisdictions.

Bitcoin ETFs, Saylor, and the Options Overhang

Spot Bitcoin ETFs logged nearly $1 billion in weekly inflows, the highest total since mid-January. Morgan Stanley's MSBT stood out with $71 million in net inflows during its first full trading week.

Michael Saylor posted "Think Even Bigger" on Sunday, teasing another large Bitcoin purchase just a week after Strategy disclosed $1 billion in BTC buying. The timing coincides with a $7.9 billion April options expiry for Bitcoin, where the price sits above max pain and heavy positioning at $75K creates potential for either a squeeze or a pullback into expiry.

Quantum Divergence: Bitcoin and Ethereum Split on Security

A Cointelegraph analysis highlights the diverging approaches Bitcoin and Ethereum are taking toward post-quantum cryptography. Bitcoin's upgrade path is conservative and likely to move slowly through its consensus process, while Ethereum's account-based model and more active governance structure give it more flexibility to adopt new signature schemes. The threat remains theoretical for now, but the preparation gap between the two chains is real and growing.

Magic City Update

The Kelp exploit is a global story, but its ripple effects land directly in Miami's growing DeFi community. Several Miami-based development teams build on Aave's lending markets, and the $300 million borrowing spike is a stress test for the infrastructure layer that local builders depend on. Firms like Alchemy, which powers node infrastructure for Miami teams building on Ethereum and Base, are fielding questions about RPC security in the wake of LayerZero's disclosure that compromised RPC nodes enabled the attack.

Miami's pitch as a crypto hub has always leaned on two things: regulatory openness and proximity to Latin American capital flows. The BIS warning about stablecoins puts both in sharper focus. Zerohash, which provides stablecoin infrastructure and operates out of South Florida, sits at the intersection of traditional finance onboarding and stablecoin issuance. If global regulators move to standardize stablecoin rules, Miami's position as a bridge between U.S. crypto firms and LatAm demand could either solidify or face new friction depending on how prescriptive those rules become.

On the events side, Bitcoin 2026 in Las Vegas is drawing attention away from Miami this month, but local organizers are already positioning for a packed fall conference schedule. ETH Miami and several DeFi-focused side events are expected to anchor an October cluster, with early speaker announcements likely in the coming weeks.