Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A catastrophic breach has occurred in the DeFi space, with an attacker successfully draining 116,500 rsETH, approximately 18% of the circulating supply, from Kelp DAO's LayerZero-powered bridge. This massive heist, valued at $292 million, has sent shockwaves throughout the industry, prompting a flurry of emergency responses from major players. The attack, which took place on Saturday at 17:35 UTC, exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the system into releasing the stolen funds to an attacker-controlled address. The aftermath of the attack has seen Kelp DAO's emergency pauser multisig freezing the protocol's core contracts, while other platforms, such as Aave, SparkLend, and Fluid, have frozen their rsETH markets in an effort to mitigate potential losses. The incident has also led to a significant decline in the value of AAVE, with the token plummeting by around 10% as the market grapples with the potential implications of the exploit. As the situation continues to unfold, the DeFi community is left to ponder the long-term consequences of this brazen attack, which has left a trail of uncertainty and vulnerability in its wake. With the attacker's actions sparking a chain reaction of panic redemptions and potential bad debt, the coming days will be crucial in determining the future of Kelp DAO and the broader DeFi ecosystem.