Massive Crypto Heist: $292 Million Stolen from Kelp DAO in 2026's Largest DeFi Exploit

A devastating cyber attack has drained nearly 18% of the circulating supply of restaked ether tokens from Kelp DAO's LayerZero-powered bridge, sparking a frantic response from the DeFi community. The attacker, who tricked the cross-chain messaging layer into releasing 116,500 rsETH to a controlled address, has left a trail of destruction in their wake. With the stolen funds valued at roughly $292 million, the fallout is being felt across over 20 blockchains where wrapped versions of the token are deployed. As the news spreads, market participants are bracing for potential contagion, with Aave, SparkLend, and Fluid already freezing rsETH markets and Lido Finance pausing further deposits into its earnETH product. The incident has sparked a wave of panic, with holders of wrapped tokens facing uncertainty over the value of their assets and the potential for further losses. As the investigation into the exploit continues, the DeFi community is holding its breath, awaiting news of any potential recovery of the stolen funds and assessing the long-term impact of this massive heist.