Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a devastating attack, an estimated $292 million worth of rsETH was siphoned from Kelp DAO's LayerZero-powered bridge, prompting a frantic response from the DeFi community. The breach, which occurred on Saturday at 17:35 UTC, saw 116,500 rsETH tokens, representing approximately 18% of the total circulating supply, being drained from the bridge. This has significant implications for the numerous blockchains that have wrapped versions of the token, with holders now facing uncertainty over the value of their assets. The attack was made possible by the exploitation of LayerZero's cross-chain messaging layer, which was tricked into releasing the rsETH tokens to an attacker-controlled address. In the aftermath, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, while several other DeFi platforms, including Aave, SparkLend, and Fluid, have frozen their rsETH markets. The incident has sparked fears of a potential contagion, with many in the community bracing for further fallout. As the situation continues to unfold, all eyes are on Kelp DAO and its efforts to recover the stolen funds and prevent further damage to the DeFi ecosystem.