Katana CEO Matthew Fisher has declared that “DeFi is not dead. DeFi is United,” following the resolution of a $292 million exploit targeting Kelp on April 19. The incident, which renewed fears around North Korean cyber threats, marked what Fisher described as DeFi's worst week since the FTX collapse.
The Kelp exploit has brought renewed attention to Lazarus Group, which Fisher estimates earned $1.5 billion in 2025 alone—accounting for a few percent of North Korea’s GDP. The attack underscores persistent security vulnerabilities in decentralized finance, even as the sector attempts to recover from past crises.
DeFi protocols have faced repeated hacks, with Lazarus Group emerging as a dominant threat actor. The group’s ability to launder stolen funds through mixers and cross-chain bridges has challenged oversight efforts. This latest incident has reignited debates about how to balance decentralization with robust security measures.
Fisher’s comments signal an effort to rally the community around stronger defenses and collaboration. However, the exploit also highlights the uphill battle DeFi faces in regaining mainstream trust, especially as regulators globally scrutinize the space more closely.
While Fisher’s call for unity may resonate, critics argue that such rhetoric does little to address the structural risks in DeFi, including code vulnerabilities and reliance on pseudonymous developers. The Kelp incident is a stark reminder that technical and governance flaws remain, regardless of community sentiment.