Massive Crypto Heist: Kelp DAO Loses $292 Million in rsETH Tokens Across 20 Blockchains

A significant exploit has occurred in the DeFi space, with an attacker successfully draining nearly 18% of the circulating supply of rsETH tokens from Kelp DAO's LayerZero-powered bridge. The stolen tokens, worth around $292 million, were part of a cross-chain bridge that held the reserves for wrapped versions of the token on over 20 different blockchains. The attacker manipulated LayerZero's messaging layer to release the tokens to an attacker-controlled address. In response, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, and several major DeFi players, including Aave and SparkLend, have taken measures to mitigate potential losses. The incident has raised concerns about the potential for widespread contagion and the stability of the DeFi ecosystem.