Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Chains Exposed

A staggering 18% of the circulating supply of restaked ether (rsETH) has been drained from Kelp DAO's LayerZero-powered bridge, sparking widespread concern and panic across the DeFi ecosystem. The attack, which occurred on Saturday at 17:35 UTC, saw 116,500 rsETH siphoned off to an attacker-controlled address, valued at approximately $292 million at current market prices. This significant breach has left the reserves backing wrapped versions of the token on over 20 blockchains severely depleted, triggering fears of a potential collapse in the value of rsETH. Kelp DAO, a liquid restaking protocol, utilizes EigenLayer to generate additional yield on user-deposited ETH, issuing rsETH as a tradeable receipt. The bridge in question, which was compromised, held the rsETH reserve that supported wrapped versions of the token on multiple layer 2 blockchains. The attacker manipulated LayerZero's cross-chain messaging layer into releasing the funds, exploiting a vulnerability that allowed them to bypass the bridge's validation logic. In response, Kelp's emergency pauser multisig froze the protocol's core contracts 46 minutes after the attack, with two subsequent attempts by the attacker thwarted. The fallout from this incident is being felt across the DeFi landscape, with Aave, SparkLend, and Fluid all freezing their rsETH markets and Lido Finance pausing further deposits into its earnETH product. The stability of rsETH and the broader DeFi ecosystem hangs in the balance, as the community waits with bated breath to see if Kelp can recover any of the stolen funds and restore confidence in the market.