Aave Faces Potential Losses of Up to $230 Million Following Kelp DAO Bridge Exploit

A recent bridge exploit involving Kelp DAO and LayerZero has put lending protocol Aave at risk of losing up to $230 million, depending on the resolution of the situation. According to a report from Aave Labs and LlamaRisk, the incident revolves around rsETH, a liquid restaking token issued by KelpDAO, which relies on a bridge mechanism to transfer tokens between blockchains. An attacker exploited this setup by creating a fake transfer message, resulting in the creation of new, unbacked tokens. The attacker then used these tokens as collateral to borrow approximately $190 million in ETH and related assets from Aave. To mitigate the risk, Aave promptly froze rsETH markets, set loan-to-value ratios to zero, and halted new borrowing against the asset. The outcome now depends on how Kelp DAO handles the shortfall. If losses are spread across all rsETH holders, Aave would face around $124 million in bad debt, whereas isolating losses to Layer 2 networks could result in $230 million in bad debt. The exploit was made possible by weaknesses in Kelp's cross-chain message verification process using LayerZero, allowing the attacker to extract value from the system. The incident has raised concerns about the safety of interconnected DeFi infrastructure, with around $6 billion in total value locked withdrawn from Aave following the exploit. Discussions are underway between ecosystem participants to address potential losses, with Kelp's DAO treasury holding approximately $181 million in assets.