Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a shocking turn of events, a cross-chain bridge holding nearly 18% of the circulating supply of restaked ether (rsETH) has been drained, sparking a wave of panic throughout the DeFi ecosystem. On Saturday at 17:35 UTC, an attacker successfully exploited Kelp DAO's LayerZero-powered bridge, making off with 116,500 rsETH, valued at around $292 million at current prices. This significant breach has triggered a series of emergency measures, including the freezing of contracts across Aave, SparkLend, and Fluid, as the attacker's actions have left the DeFi community reeling. The stolen rsETH was part of a reserve backing wrapped versions of the token on over 20 blockchains, leaving holders on non-Ethereum deployments wondering if their tokens still hold value. With the reserve depleted, a potential feedback loop of panic redemptions on layer 2 blockchains could pressure the unaffected Ethereum supply, forcing Kelp to unwind its restaking positions to honor withdrawals. The fallout from this exploit is widespread, with Aave, SparkLend, and Fluid all freezing their rsETH markets, and AAVE's price plummeting by around 10% as the market assesses the potential for bad debt. Lido Finance has also paused further deposits into its earnETH product due to its exposure to rsETH, while Ethena has temporarily halted its LayerZero OFT bridges as a precautionary measure. As Kelp DAO investigates the incident with LayerZero, Unichain, and outside security specialists, the DeFi community waits with bated breath to see if the protocol can recover any of the stolen funds and prevent further damage to the ecosystem.