Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Exposed

A catastrophic breach has occurred in the DeFi space, with an attacker successfully draining a substantial amount of rsETH from Kelp DAO's LayerZero-powered bridge, sparking a wave of panic and prompting emergency actions from various platforms. The attack, which took place on Saturday at 17:35 UTC, saw the thief make off with 116,500 rsETH, valued at around $292 million, representing roughly 18% of the token's circulating supply. This exploit has significant implications, as the stolen funds were part of the reserve backing wrapped versions of rsETH on over 20 different blockchains. The attacker manipulated LayerZero's cross-chain messaging layer, deceiving it into releasing the funds to an attacker-controlled address. In response, Kelp's emergency pauser multisig froze the protocol's core contracts 46 minutes later, at 18:21 UTC, to prevent further damage. However, two subsequent attempts to drain an additional 40,000 rsETH, worth approximately $100 million, were thwarted. The repercussions of this incident are far-reaching, with the affected blockchains, including Base, Arbitrum, Linea, Blast, Mantle, and Scroll, facing uncertainty regarding the validity of their wrapped rsETH tokens. As a result, holders of these tokens are now questioning their value, leading to a potential feedback loop of panic redemptions that could pressure the unaffected Ethereum supply and force Kelp to unwind restaking positions to honor withdrawals. The fallout from this incident has already begun, with Aave, SparkLend, and Fluid freezing their rsETH markets, while Lido Finance has paused further deposits into its earnETH product due to its exposure to rsETH. The stablecoin issuer Ethena has also temporarily paused its LayerZero OFT bridges as a precautionary measure. Kelp, a product under the KernelDAO umbrella, has acknowledged the incident and is working with LayerZero, Unichain, auditors, and outside security specialists to investigate the matter. The outcome of this situation remains uncertain, with the value of rsETH hanging in the balance, as the DeFi community waits to see whether Kelp can recover any of the stolen funds before the trail goes cold.