Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Wrapped Ether Stranded Across 20 Blockchains

A devastating crypto exploit has drained nearly a fifth of the circulating supply of a restaked ether token, with the stolen funds now scattered across over 20 blockchains, triggering a cascade of emergency measures throughout the DeFi ecosystem. On Saturday, an attacker successfully siphoned off 116,500 rsETH, valued at around $292 million, from Kelp DAO's LayerZero-powered bridge, which utilizes a cross-chain messaging layer to facilitate communication between different blockchains. Kelp DAO, a liquid restaking protocol, issues rsETH as a tradeable receipt for user-deposited ETH, which is then routed through EigenLayer to generate additional yield beyond standard Ethereum staking rewards. The breached bridge held the rsETH reserve backing wrapped versions of the token deployed on multiple layer 2 blockchains. The attacker manipulated LayerZero's messaging layer into releasing 116,500 rsETH to an attacker-controlled address. In response, Kelp's emergency pauser multisig froze the protocol's core contracts 46 minutes after the attack. However, two subsequent attempts to drain an additional 40,000 rsETH, worth approximately $100 million, were thwarted. The exploit has significant implications for holders of rsETH on non-Ethereum deployments, as the drained reserve backing wrapped versions on every layer 2 blockchain raises concerns about the tokens' underlying value. This has created a feedback loop where panic redemptions on layer 2 blockchains may pressure the unaffected Ethereum supply, potentially forcing Kelp to unwind restaking positions to honor withdrawals. The fallout from the exploit has already led to Aave, SparkLend, and Fluid freezing their rsETH markets, while Lido Finance has paused further deposits into its earnETH product due to rsETH exposure. The incident has also prompted Ethena to temporarily pause its LayerZero OFT bridges from Ethereum mainnet as a precautionary measure. Kelp DAO has acknowledged the incident and is currently investigating the exploit with LayerZero, Unichain, its auditors, and outside security specialists. The ability of rsETH to maintain its peg through the weekend depends on the extent of cross-chain redemptions into ETH on Ethereum and Kelp's ability to recover any portion of the stolen funds before the trail goes cold. This attack is the latest in a series of DeFi exploits, including the recent $285 million drain of Solana-based perpetuals protocol Drift, and highlights the ongoing vulnerabilities in the DeFi ecosystem.