Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Wrapped Ether Stranded Across 20 Blockchains

A devastating crypto exploit has occurred, with an attacker draining nearly 18% of the circulating supply of restaked ether tokens from Kelp DAO's LayerZero-powered bridge, worth around $292 million. This incident has triggered a wave of emergency freezes and pauses across multiple DeFi platforms, including Aave, SparkLend, and Fluid, as they attempt to mitigate the damage. The attacker exploited LayerZero's cross-chain messaging layer, tricking it into releasing 116,500 rsETH to an attacker-controlled address. Kelp DAO's emergency pauser multisig eventually froze the protocol's core contracts, but not before two follow-up attempts were made to drain an additional 40,000 rsETH. The stolen tokens were part of the reserve backing wrapped versions of rsETH deployed on over 20 other blockchains, leaving holders on non-Ethereum deployments uncertain about the value of their tokens. This has created a feedback loop where panic redemptions on layer 2 blockchains may pressure the unaffected Ethereum supply, potentially forcing Kelp to unwind restaking positions to honor withdrawals. The fallout from this incident is still unfolding, with Aave, SparkLend, and Fluid freezing their rsETH markets, and Lido Finance pausing further deposits into its earnETH product. The incident has also led to a temporary pause of Ethena's LayerZero OFT bridges from Ethereum mainnet as a precautionary measure. Kelp DAO has acknowledged the incident and is investigating with LayerZero, Unichain, its auditors, and outside security specialists, but has not disclosed how the exploit bypassed the bridge's validation logic. The outcome of this incident will depend on how much of the cross-chain float tries to redeem into ETH on Ethereum and whether Kelp can recover any portion of the stolen funds before the trail goes cold.