The trapdoor was one node wide and North Korea walked through it

On April 18, 2026, a single misconfigured security checkpoint inside a cross-chain crypto bridge gave North Korea's Lazarus Group the opening to drain $290 million from Kelp DAO's liquid restaking protocol. What followed in the next 24 hours was not just a theft. It was a controlled demolition of $292 million in leveraged positions across a market that had no idea the floor had already been removed.