Crypto Exploit of 2026: Kelp DAO Loses $292 Million in Major Heist

A devastating exploit has struck Kelp DAO, a liquid restaking protocol, with an attacker making off with 116,500 rsETH, valued at around $292 million, by deceiving LayerZero's cross-chain messaging layer into releasing the tokens. This significant breach has triggered a wave of emergency responses across the DeFi landscape, including Aave, SparkLend, and Fluid, which have frozen rsETH markets to mitigate potential damage. The attack's impact is far-reaching, with the stolen rsETH reserve backing wrapped versions of the token on over 20 networks, leaving holders uncertain about the value of their tokens and potentially sparking a wave of panic redemptions. As the situation unfolds, Kelp DAO, along with LayerZero and security experts, is investigating the incident, aiming to recover the stolen funds and restore confidence in the protocol.