Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A devastating cyber attack has struck Kelp DAO, a liquid restaking protocol, with the attacker making off with 116,500 rsETH, valued at approximately $292 million. This significant breach occurred on Saturday at 17:35 UTC, when the attacker exploited LayerZero's cross-chain messaging layer, tricking it into releasing the funds to an attacker-controlled address. The stolen rsETH was part of a reserve backing wrapped versions of the token deployed across over 20 blockchains, including Base, Arbitrum, and Scroll. The aftermath of the attack has seen a ripple effect throughout the DeFi ecosystem, with several platforms, such as Aave and Lido Finance, taking swift action to freeze markets and pause deposits. The incident has raised concerns about the potential for widespread contagion, as holders of rsETH on non-Ethereum deployments face uncertainty over the value of their tokens. As the situation continues to unfold, the DeFi community remains on high alert, with many watching to see how Kelp DAO will respond to the crisis and whether the stolen funds can be recovered.