Aave Faces Potential Losses of Up to $230 Million Following Kelp DAO Bridge Exploit

A recent exploit of the Kelp DAO and LayerZero bridge has put lending protocol Aave at risk of losses up to $230 million, pending the resolution of the situation. According to a report from Aave Labs and LlamaRisk, the incident revolves around rsETH, a liquid restaking token issued by KelpDAO, which relies on a bridge mechanism to transfer tokens between blockchains. An attacker exploited this setup by creating a forged transfer message, resulting in the creation of new, unbacked tokens. The attacker then used these tokens as collateral to borrow approximately $190 million in ETH and related assets from Aave, leaving the protocol exposed to potentially impaired collateral. Aave Labs quickly responded by freezing rsETH markets, setting loan-to-value ratios to zero, and halting new borrowing against the asset. The outcome now largely depends on how Kelp handles the shortfall, with two possible scenarios: if losses are spread across all rsETH holders, Aave would face around $124 million in bad debt, but if losses are isolated to Layer 2 networks, the impact would be more severe, with bad debt rising to roughly $230 million. The exploit was made possible by weaknesses in Kelp's verification of cross-chain messages using LayerZero, allowing the attacker to extract value from the system. This incident has raised concerns about the potential for undercollateralized loans and has led to a withdrawal of around $6 billion in total value locked from Aave. The report notes that Aave's DAO treasury holds approximately $181 million in assets and that discussions are underway to address potential losses, but the ultimate exposure remains uncertain.