This report describes attack patterns based on publicly available threat intelligence and does not attribute activity to any specific country, organization, or individual.

Kelp DAO fell victim to a sophisticated exploit resulting in a catastrophic loss of $293 million.

This operation was led by an automated AI agent requiring no human intervention.

The attackers leveraged an AI tool, Context.ai, as an entry point.

By March 2026, its total value locked (TVL) had exceeded $1.2 billion, ranking third among Solana DEXs, surpassing even older protocols like Serum.

The Real Problem Isn't the Hack — It's How We Trust the System

The attacker targeted Composable Stable Pools, exploiting a rounding direction error in scaling math combined with the composability of batchSwap

Two landmark cases—EchoLeak and ForcedLeak—demonstrate that zero-click attacks and indirect prompt injection have become core risks facing enterprise AI assistants.

By April 2026, Silent Push disclosed that the network had completed a "de-FUNNULL-ization"

This was not a simple data breach; it was a multi-stage exploitation of the "trust chain" between interconnected cloud ecosystems.