Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Exposed

A devastating cyber attack has struck Kelp DAO, a liquid restaking protocol, resulting in the theft of 116,500 rsETH, valued at around $292 million. The breach occurred on Saturday at 17:35 UTC, when an attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, deceiving the system into releasing the funds to a malicious address. The stolen rsETH, which accounts for roughly 18% of the token's circulating supply, was held in a bridge that supported wrapped versions of the token on over 20 different blockchains. The fallout from the attack is being felt across the DeFi ecosystem, with several major platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets in response to the incident. The attack has also raised concerns about the potential for a liquidity crisis, as holders of rsETH on non-Ethereum deployments face uncertainty over the value of their tokens. As the situation continues to unfold, the DeFi community is left to ponder the implications of this massive heist, which has already led to significant price volatility and is likely to have far-reaching consequences for the industry as a whole.