Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Wrapped Ether Stranded Across 20 Blockchains
A significant attack on a cross-chain bridge has resulted in the theft of nearly a fifth of the total circulating supply of a restaked ether token, sparking a ripple effect throughout the DeFi ecosystem. On Saturday, an attacker successfully drained 116,500 rsETH, valued at around $292 million, from Kelp DAO's LayerZero-powered bridge. This incident has triggered a series of emergency measures, including the freezing of contracts across various platforms such as Aave, SparkLend, and Fluid. The breach has also raised concerns about the potential impact on the value of wrapped ether tokens deployed across over 20 different blockchains. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the system into releasing the stolen funds to an attacker-controlled address. In response, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, and several follow-up attempts to drain additional funds were thwarted. The incident has led to a freeze on rsETH markets and has sparked fears of a potential contagion effect, with AAVE experiencing a 10% decline in value. As the situation continues to unfold, the DeFi community remains on high alert, with many platforms taking precautionary measures to mitigate potential losses. The hack is the latest in a series of high-profile exploits to hit the DeFi space in recent weeks, highlighting the ongoing need for robust security measures to protect against such attacks.