Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Chains with Stranded Wrapped Ether

A recent security breach has left a significant portion of the restaked ether token's circulating supply at risk, after an attacker successfully drained 116,500 rsETH, valued at approximately $292 million, from Kelp DAO's LayerZero-powered bridge on Saturday. This incident has triggered a cascade of emergency responses across the DeFi ecosystem, as the stolen funds were used to back wrapped versions of the token on over 20 different blockchains. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, deceiving the system into releasing the rsETH to an attacker-controlled address. In response, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, while other platforms, such as Aave, SparkLend, and Fluid, have also taken measures to mitigate potential losses. The fallout from this incident is still unfolding, with the potential for widespread contagion and significant financial losses. The incident has raised concerns about the security and stability of DeFi platforms, particularly in light of recent attacks on other protocols, including Drift, CoW Swap, Zerion, Rhea Finance, and Silo Finance. As the situation continues to develop, the DeFi community is left to wonder about the potential long-term consequences of this major crypto heist.