North Korea's Lazarus Group stole $292 million from two DeFi protocols that are now publicly blaming each other
Lazarus Group, North Korea's state-sponsored hacking operation, stole $292 million by exploiting a shared smart contract vulnerability between two DeFi protocols on April 21, 2026. Rather than coordinating a response, the two victimized platforms publicly blamed each other, turning the incident viral and hampering recovery efforts. The theft ranks among the largest DeFi heists in history and underscores the growing threat of composability risk in cross-chain infrastructure.