Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchain Networks Vulnerable

A devastating cyberattack has struck Kelp DAO, a liquid restaking protocol, with the perpetrator making off with approximately $292 million worth of restaked ether (rsETH) from the platform's LayerZero-powered bridge. This significant breach, which occurred on Saturday at 17:35 UTC, accounts for roughly 18% of the token's circulating supply, as tracked by CoinGecko. The attacker exploited LayerZero's cross-chain messaging system, deceiving it into releasing 116,500 rsETH to a malicious address. Kelp DAO's emergency response team subsequently froze the protocol's core contracts 46 minutes later, at 18:21 UTC, in an attempt to mitigate further damage. The aftermath of the attack has seen a ripple effect throughout the DeFi ecosystem, with several prominent platforms, including Aave, SparkLend, and Fluid, hastily freezing their rsETH markets to prevent potential losses. The incident has also prompted Lido Finance to pause further deposits into its earnETH product, citing rsETH exposure concerns. As the situation continues to unfold, the DeFi community remains on high alert, with many investors and platforms anxiously awaiting the outcome of Kelp DAO's investigation and potential recovery efforts. With the attacker's actions leaving a trail of uncertainty across over 20 blockchain networks, the coming days will be crucial in determining the long-term impact of this substantial crypto heist.