Lazarus Group hacks KelpDAO, pushes April DeFi losses over $600M

A $292 million hack drained funds from a DeFi bridge this month, pushing cumulative April losses above $600 million. The Polymarket contract on whether another $100M+ crypto hack occurs by December 31 sits at 100% YES.

## Market reaction

The Lazarus Group, a North Korea-linked hacking collective, exploited KelpDAO’s infrastructure, accounting for a large share of April’s losses. The crypto hack predictions market holds at a consistent 100% YES across its sub-market. Face value remains at $0, meaning no new trades are flowing into the contract, likely because the outcome is already priced as a certainty.

## Why it matters

Major hacks keep happening even as protocols adopt countermeasures like circuit breakers. The Lazarus Group’s continued targeting of DeFi infrastructure means the threat is state-sponsored and well-resourced, not opportunistic. JPMorgan’s recent report identified these incidents as a specific barrier to institutional entry into DeFi, arguing they could slow broader adoption. At 100% YES, the market is pricing in near-certainty that at least one more $100M+ exploit will occur before year-end.

## What to watch

Blockchain security firms Chainalysis and CertiK publish regular vulnerability reports and post-breach analyses. Their findings could flag at-risk protocols before the next major exploit or confirm new breaches as they happen. Any radical change in protocol security standards, or lack thereof, will determine whether the market’s certainty is justified.

## API CTA

Get prediction market intelligence as a structured API feed. Early access waitlist.