Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a shocking turn of events, a cross-chain bridge supporting nearly a fifth of the circulating supply of restaked ether tokens has been drained, sending shockwaves through the DeFi ecosystem. On Saturday at 17:35 UTC, an attacker exploited Kelp DAO's LayerZero-powered bridge, siphoning off 116,500 rsETH, equivalent to roughly $292 million at current market prices, and accounting for approximately 18% of the token's total circulating supply. The breach has left the reserves backing wrapped versions of the token on over 20 blockchains severely depleted. The attacker cleverly manipulated LayerZero's cross-chain messaging layer, deceiving it into releasing the sizable amount of rsETH to an attacker-controlled address. In response, Kelp's emergency pauser multisig swiftly froze the protocol's core contracts, albeit 46 minutes after the successful heist. Two subsequent attempts to drain an additional 40,000 rsETH, valued at around $100 million, were thwarted. The repercussions of this attack are far-reaching, with rsETH deployed across multiple networks, including Base, Arbitrum, Linea, Blast, Mantle, and Scroll, all of which now face uncertainty. As the news unfolded, Aave, SparkLend, and Fluid promptly froze their rsETH markets, while Lido Finance paused further deposits into its earnETH product due to its exposure to rsETH. The incident has sparked fears of a potential contagion, with AAVE's price plummeting by approximately 10% as the market reacts to the potential for bad debt. Ethena, a stablecoin issuer, has temporarily suspended its LayerZero OFT bridges from the Ethereum mainnet as a precautionary measure. Kelp DAO, operating under the KernelDAO umbrella, has acknowledged the incident and is collaborating with LayerZero, Unichain, auditors, and external security specialists to investigate the matter. The ability of rsETH to maintain its peg over the weekend hinges on the extent to which the cross-chain float seeks redemption into ETH on the Ethereum network and Kelp's capacity to recover any portion of the stolen funds before the trail goes cold. This high-profile hack occurs during an exceptionally challenging period for DeFi, following the recent exploits of Solana-based perpetuals protocol Drift, which lost approximately $285 million, and at least a dozen smaller protocols that have fallen victim to attacks in recent weeks.