Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Investors Reeling
A recent and severe security breach has shaken the DeFi community, as an attacker successfully drained approximately $292 million from Kelp DAO's LayerZero-powered bridge. This significant loss, representing around 18% of the circulating supply of restaked ether tokens, has triggered a wave of emergency responses across various DeFi platforms, including Aave, SparkLend, and Fluid. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer to trick the bridge into releasing 116,500 restaked ether tokens to an attacker-controlled address. In response, Kelp's emergency pauser multisig froze the protocol's core contracts, and several platforms have taken measures to mitigate potential losses, such as freezing markets and pausing deposits. The incident has raised concerns about the potential for a broader contagion effect, with many investors left wondering if their tokens are backed by any actual value. As the situation continues to unfold, the DeFi community is on high alert, with many protocols taking precautions to protect themselves and their users from potential fallout.