Major Exploit: Kelp DAO Loses $292 Million

Recent News KELP DAO BREACH: A significant exploit has occurred, with nearly a fifth of the circulating supply of a restaked ether token being drained, causing rapid fallout in the DeFi sector. At 17:35 UTC over the weekend, an attacker exploited a cross-chain bridge, stealing 116,500 rsETH (restaked ether) valued at approximately $292 million. This represents around 18% of the token's total supply. The breach occurred on a LayerZero-powered bridge, which facilitates communication between different blockchains. Kelp DAO, a liquid restaking protocol, had its bridge holding the rsETH reserve compromised. The attacker manipulated the cross-chain messaging layer, tricking it into releasing the tokens to an attacker-controlled address. Emergency measures were taken, freezing the protocol's core contracts 46 minutes later. Two subsequent attempts to drain another 40,000 rsETH were thwarted. — Shaurya Malwa Read more. NORTH KOREA'S CRYPTO ATTACK STRATEGY: Less than three weeks after North Korea-linked hackers used social engineering to exploit a crypto trading firm, another significant breach has been linked to the nation. The attack on Kelp, a restaking protocol tied to LayerZero's infrastructure, suggests an evolution in tactics. Rather than seeking bugs or stolen credentials, the hackers exploited fundamental assumptions in decentralized systems. The two incidents indicate a more organized effort by North Korea to target the crypto sector. Over $500 million has been stolen in the two breaches. The Kelp exploit did not involve breaking encryption but rather manipulating data to force the system to approve fake transactions. — Margaux Nijkerk Read more. AAVE IMPACTED BY KELP DAO BREACH: The attacker forged a transfer message, prompting the system to release 116,500 rsETH without the tokens being transferred. The attacker then used 89,567 rsETH as collateral on Aave, borrowing roughly $190 million in ETH and related assets. Aave moved to contain the risk, freezing rsETH markets and halting new borrowing. The outcome depends on how Kelp handles the shortfall. If losses are spread across all rsETH holders, Aave could face $124 million in bad debt. If losses are isolated to Layer 2 networks, the impact could be more severe, with bad debt potentially reaching $230 million. — Margaux Nijkerk Read more. COINBASE REPORT ON QUANTUM COMPUTING RISKS: A report commissioned by Coinbase warns that while current blockchains are secure, the industry must prepare for the potential risks of quantum computing. The report, authored by prominent cryptographers and academics, concludes that a future 'fault-tolerant quantum computer' could break widely used encryption. Google researchers have estimated that a sufficiently advanced quantum computer could break Bitcoin's cryptography. Major crypto ecosystems are already planning their responses, with the Ethereum Foundation proposing new digital signatures and Solana experimenting with quantum-resistant wallet designs. The report stresses that current quantum machines are not powerful enough to crack standard encryption, but preparation is necessary. — Margaux Nijkerk Read more. Other News Regulatory and Policy Calendar