Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A recent and severe security breach has targeted Kelp DAO, a prominent liquid restaking protocol, resulting in the loss of nearly 18% of the circulating supply of restaked ether tokens. The attacker exploited a vulnerability in the protocol's LayerZero-powered bridge, successfully draining 116,500 rsETH, which is currently valued at around $292 million, from the bridge's reserve. This reserve was used to back wrapped versions of the token on over 20 other blockchains, leaving numerous networks potentially exposed. The attack was carried out by tricking the cross-chain messaging layer into releasing the funds to an attacker-controlled address. In response, Kelp DAO's emergency pauser multisig froze the core contracts in an attempt to mitigate further damage. However, the aftermath of the attack has led to a ripple effect, with several DeFi platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets. The incident has also raised concerns about the potential for panic redemptions on layer 2 blockchains, which could put additional pressure on the Ethereum supply. As the situation unfolds, the cryptocurrency community is left to ponder the implications of this significant breach and the potential consequences for the broader DeFi ecosystem.