2026's Largest Crypto Heist: Kelp DAO Loses $292 Million in Major Security Breach

A devastating security breach has struck Kelp DAO, a liquid restaking protocol, resulting in the theft of 116,500 restaked ether tokens, valued at approximately $292 million. The attack, which occurred on Saturday, exploited a vulnerability in the protocol's LayerZero-powered bridge, allowing the perpetrator to trick the system into releasing the tokens to an attacker-controlled address. The breach has sent shockwaves throughout the DeFi community, with several major protocols, including Aave, SparkLend, and Fluid, freezing their markets in response to the incident. The attack has also raised concerns about the potential for a broader contagion, as the stolen tokens were backed by a reserve held across over 20 different blockchains. As the situation continues to unfold, the DeFi community is left to wonder whether the affected tokens will maintain their value and how the incident will impact the broader cryptocurrency market. The hack is the latest in a series of high-profile security breaches to hit the DeFi space in recent weeks, including the $285 million heist targeting Solana-based perpetuals protocol Drift. With the total value of the stolen funds now exceeding $292 million, the incident has become the largest DeFi exploit of 2026, highlighting the ongoing risks and challenges faced by the rapidly evolving cryptocurrency ecosystem.