Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchain Networks Vulnerable

A devastating crypto exploit has shaken the DeFi ecosystem, as an attacker successfully drained a substantial amount of restaked ether tokens from Kelp DAO's LayerZero-powered bridge. On Saturday, at 17:35 UTC, the attacker managed to trick the cross-chain messaging layer into releasing 116,500 rsETH, worth roughly $292 million, to an attacker-controlled address. This incident has triggered a wave of panic, with multiple platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets in response. The stolen tokens were part of a reserve backing wrapped versions of rsETH on over 20 blockchain networks, leaving holders on non-Ethereum deployments uncertain about the value of their tokens. As the situation unfolds, the DeFi community is bracing for potential further contagion, with AAVE prices already experiencing a 10% drop. The exploit has also led to precautionary measures, such as Ethena temporarily pausing its LayerZero OFT bridges, and Lido Finance halting further deposits into its earnETH product. Kelp DAO has acknowledged the incident and is currently investigating the matter with LayerZero, Unichain, and outside security specialists, but the road to recovery remains uncertain.