Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a shocking turn of events, a hacker successfully drained 116,500 rsETH, equivalent to roughly $292 million, from Kelp DAO's LayerZero-powered bridge. The attack, which occurred on Saturday at 17:35 UTC, has sent ripples throughout the DeFi ecosystem. The exploited bridge held the rsETH reserve that backed wrapped versions of the token on over 20 other blockchains, leaving many holders uncertain about the value of their tokens. The attacker manipulated LayerZero's cross-chain messaging layer, tricking it into releasing the rsETH to an attacker-controlled address. Kelp DAO's emergency response team froze the protocol's core contracts 46 minutes after the attack, but not before the hacker made two follow-up attempts to drain an additional 40,000 rsETH. The aftermath of the attack has seen a contagion effect, with Aave, SparkLend, and Fluid freezing their rsETH markets, and Lido Finance pausing further deposits into its earnETH product. The incident has raised concerns about the potential for bad debt and has led to a decline in the value of AAVE. As the situation continues to unfold, the DeFi community is left to wonder about the potential long-term implications of this massive heist.