Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A devastating crypto exploit has struck Kelp DAO, a liquid restaking protocol, resulting in the theft of 116,500 rsETH, equivalent to roughly $292 million. This significant breach has triggered a wave of emergency responses across the DeFi landscape, with major players like Aave, SparkLend, and Fluid taking swift action to freeze rsETH markets. The attack, which occurred on Saturday, exploited LayerZero's cross-chain messaging layer, allowing the perpetrator to trick the system into releasing the substantial amount of rsETH to an attacker-controlled address. As a result, the reserve backing wrapped versions of the token on over 20 blockchains has been depleted, leaving holders on non-Ethereum deployments uncertain about the value of their tokens. This has created a ripple effect, with panic redemptions on layer 2 blockchains potentially forcing Kelp to unwind restaking positions to honor withdrawals. The fallout is being felt across the DeFi ecosystem, with AAVE experiencing a 10% decline and other platforms taking precautionary measures to mitigate potential losses. The incident is currently under investigation, with Kelp working closely with LayerZero, Unichain, auditors, and security specialists to determine the cause of the exploit and recover the stolen funds.