Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A catastrophic breach of a cross-chain bridge has led to the theft of approximately 116,500 rsETH, valued at $292 million, from Kelp DAO, a liquid restaking protocol that utilizes LayerZero's messaging layer to facilitate communication between different blockchains. The stolen funds represent roughly 18% of the circulating supply of rsETH, a token that is deployed across over 20 networks, including Base, Arbitrum, and Scroll. The attacker exploited a vulnerability in LayerZero's cross-chain messaging system, tricking the bridge into releasing the funds to an attacker-controlled address. In response to the attack, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, while other DeFi platforms, such as Aave and SparkLend, have frozen their rsETH markets to mitigate potential losses. The incident has raised concerns about the stability of the DeFi ecosystem, particularly given the recent string of high-profile exploits, including the $285 million hack of Solana-based perpetuals protocol Drift. As the situation continues to unfold, holders of rsETH on non-Ethereum deployments are left wondering whether their tokens are backed by any underlying assets, creating a potential feedback loop of panic redemptions that could further destabilize the market. The full extent of the damage and the potential for recovery remain to be seen, as Kelp DAO and LayerZero investigate the incident and work to prevent similar attacks in the future.