Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Affected

A significant breach has occurred in the DeFi space, with an attacker successfully draining 116,500 rsETH, valued at around $292 million, from Kelp DAO's LayerZero-powered bridge. This incident has sent shockwaves throughout the industry, with the stolen funds representing about 18% of the total circulating supply of rsETH. The breach has affected numerous blockchains, including Base, Arbitrum, and Scroll, where rsETH is deployed. As a result, several major DeFi platforms, such as Aave and SparkLend, have frozen their rsETH markets, while others, like Lido Finance, have paused deposits into related products. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the system into releasing the funds to an attacker-controlled address. Kelp DAO has initiated an investigation, working closely with LayerZero, Unichain, and external security experts to determine the cause of the breach and potential recovery options. The incident has sparked concerns about the stability of the DeFi ecosystem, particularly given the recent string of exploits targeting various protocols, including Drift, CoW Swap, and Silo Finance. As the situation continues to unfold, market participants are closely watching the price of AAVE, which has fallen by around 10% in response to the news, and the potential impact on the broader DeFi market.