Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Investors Reeling

A devastating cyber attack has struck Kelp DAO, a prominent liquid restaking protocol, with the perpetrator making off with a staggering 116,500 rsETH, equivalent to around 18% of the token's total circulating supply. This daring heist, which occurred on Saturday at 17:35 UTC, has sent shockwaves throughout the DeFi community, prompting urgent action from major players such as Aave, SparkLend, and Fluid. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the system into releasing the valuable tokens to an unknown address. In response, Kelp DAO's emergency pauser multisig swiftly froze the protocol's core contracts, but not before the attacker attempted two further transactions, each seeking to drain an additional 40,000 rsETH. The fallout from this incident is far-reaching, with rsETH holders on multiple networks now facing uncertainty over the value of their assets. As the situation continues to unfold, market participants are bracing for potential contagion, with AAVE experiencing a 10% decline amidst concerns over potential bad debt. Lido Finance has paused deposits into its earnETH product, while Ethena has temporarily halted its LayerZero OFT bridges as a precautionary measure. With the attacker's identity and motives still unknown, the DeFi community remains on high alert, awaiting further developments in this rapidly evolving crisis.