Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Exposed

In a shocking turn of events, a cross-chain bridge has been exploited, resulting in the theft of 116,500 rsETH, valued at around $292 million. This significant breach has triggered a wave of emergency responses across the DeFi landscape, as the fallout spreads rapidly. The attack, which occurred on Saturday at 17:35 UTC, targeted Kelp DAO's LayerZero-powered bridge, releasing a substantial portion of the rsETH reserve. This reserve backed wrapped versions of the token deployed on over 20 other blockchains, leaving holders on non-Ethereum deployments uncertain about the value of their tokens. The attacker manipulated LayerZero's cross-chain messaging layer, deceiving it into believing a legitimate instruction had been received from another network, which led to the release of the rsETH to an attacker-controlled address. In response, Kelp's emergency pauser multisig froze the protocol's core contracts 46 minutes after the successful drain. Subsequent attempts to drain an additional 40,000 rsETH were reverted. The incident has far-reaching implications, with rsETH deployed across multiple networks, including Base, Arbitrum, Linea, Blast, Mantle, and Scroll. As a result, holders on layer 2 blockchains face uncertainty about the underlying value of their tokens, potentially creating a feedback loop of panic redemptions that could pressure the unaffected Ethereum supply. The contagion list continues to grow, with Aave, SparkLend, and Fluid freezing rsETH markets, and AAVE experiencing a 10% decline. Lido Finance has paused further deposits into its earnETH product, while Ethena has temporarily paused its LayerZero OFT bridges as a precautionary measure. Kelp DAO, a product under the KernelDAO umbrella, has acknowledged the incident and is investigating with LayerZero, Unichain, its auditors, and outside security specialists. The ability of rsETH to maintain its peg over the weekend depends on the extent of cross-chain redemptions into ETH on Ethereum and Kelp's ability to recover any portion of the stolen funds before the trail goes cold. This significant exploit occurs during a particularly challenging period for DeFi, following the recent drain of $285 million from Solana-based perpetuals protocol Drift and multiple smaller protocol exploits.