Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A devastating attack on a cross-chain bridge has led to the loss of nearly 18% of the circulating supply of restaked ether tokens, sparking a crisis that is spreading rapidly throughout the DeFi ecosystem. On Saturday, an attacker successfully drained 116,500 rsETH, valued at around $292 million, from Kelp DAO's LayerZero-powered bridge, which is responsible for facilitating communication between different blockchains. The stolen funds were part of the reserve backing wrapped versions of the token on over 20 other blockchains, leaving holders on these networks uncertain about the value of their tokens. The attack was made possible by exploiting a vulnerability in LayerZero's cross-chain messaging layer, which allowed the attacker to trick the system into releasing the funds to an attacker-controlled address. The fallout from the attack has been swift, with multiple DeFi platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets in response to the incident. The situation is being closely monitored, with many wondering whether the affected tokens will be able to maintain their value and whether Kelp DAO will be able to recover any of the stolen funds. The attack is the latest in a series of high-profile exploits to hit the DeFi space in recent weeks, highlighting the ongoing risks and challenges faced by this rapidly evolving sector.