Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a shocking turn of events, a cross-chain bridge holding nearly a fifth of the total circulating supply of a restaked ether token has been breached, resulting in a staggering loss of $292 million. The attack, which occurred on Saturday at 17:35 UTC, saw 116,500 rsETH tokens siphoned off from Kelp DAO's LayerZero-powered bridge, sending shockwaves throughout the DeFi ecosystem. LayerZero, a cross-chain messaging layer, is the underlying infrastructure that enables different blockchains to communicate with each other. Kelp DAO, a liquid restaking protocol, utilizes this technology to generate additional yield for users who deposit ETH, issuing rsETH tokens as a tradeable receipt. The compromised bridge held the rsETH reserve that backed wrapped versions of the token deployed across more than 20 other blockchains, including Base, Arbitrum, Linea, Blast, Mantle, and Scroll. The attacker successfully tricked LayerZero's cross-chain messaging layer into releasing 116,500 rsETH to an attacker-controlled address. In response to the breach, Kelp's emergency pauser multisig froze the protocol's core contracts 46 minutes after the attack, at 18:21 UTC. However, two subsequent attempts to drain an additional 40,000 rsETH, worth approximately $100 million, were thwarted. The implications of this breach are far-reaching, with holders of rsETH on non-Ethereum deployments facing uncertainty about the value of their tokens. This has created a feedback loop, where panic redemptions on layer 2 blockchains may pressure the unaffected Ethereum supply, potentially forcing Kelp to unwind restaking positions to honor withdrawals. The fallout from this incident has been swift, with Aave, SparkLend, and Fluid freezing their rsETH markets. AAVE's price plummeted by approximately 10% as the market factored in potential bad debt. Lido Finance has also paused further deposits into its earnETH product, which carries rsETH exposure, while Ethena has temporarily paused its LayerZero OFT bridges from Ethereum mainnet as a precaution. Kelp, a product under the KernelDAO umbrella, has acknowledged the incident and is investigating the breach with LayerZero, Unichain, its auditors, and outside security specialists. The protocol has not disclosed how the exploit bypassed the bridge's validation logic, leaving many questions unanswered. As the DeFi community grapples with the aftermath of this massive heist, the coming days will be crucial in determining whether rsETH can maintain its peg and whether Kelp can recover any portion of the stolen funds. This incident is the latest in a series of high-profile breaches, including the $285 million drain of Solana-based perpetuals protocol Drift, and serves as a stark reminder of the ever-present threats to the DeFi ecosystem.