Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Wrapped Ether Stranded Across 20 Blockchains

A significant attack has drained nearly 18% of the circulating supply of restaked ether tokens from Kelp DAO's LayerZero-powered bridge, triggering a wave of emergency freezes and raising concerns about the stability of the DeFi ecosystem. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the bridge into releasing 116,500 rsETH to an attacker-controlled address. This has left holders of wrapped versions of the token on over 20 other blockchains uncertain about the value of their assets. In response, several major DeFi platforms, including Aave, SparkLend, and Fluid, have frozen their rsETH markets, while Lido Finance has paused further deposits into its earnETH product. The incident has also led to a decline in the value of AAVE, with the token falling by around 10%. As the situation continues to unfold, the long-term impact on the DeFi ecosystem remains to be seen, with the potential for further contagion and instability.