Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a shocking turn of events, a cross-chain bridge holding nearly 18% of the circulating supply of restaked ether (rsETH) has been drained, with the attacker making off with a staggering $292 million worth of tokens. The breach, which occurred on Saturday at 17:35 UTC, has sent shockwaves through the DeFi community, with multiple platforms scrambling to respond to the crisis. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the system into releasing 116,500 rsETH to an attacker-controlled address. The fallout from the attack is still unfolding, with holders of wrapped versions of the token on over 20 blockchains facing uncertainty about the value of their assets. As the situation continues to develop, several major DeFi platforms, including Aave, SparkLend, and Fluid, have frozen their rsETH markets, while others, such as Lido Finance, have taken precautionary measures to mitigate potential losses. The incident has sparked fears of a broader contagion, with the potential for panic redemptions to put pressure on the unaffected Ethereum supply and force Kelp to unwind restaking positions to honor withdrawals. With the list of affected platforms continuing to grow, the DeFi community is bracing for a potentially long and difficult weekend.