Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Exposed

A devastating breach has occurred in the DeFi space, with an attacker successfully draining a substantial amount of restaked ether (rsETH) from Kelp DAO's LayerZero-powered bridge. The incident, which took place on Saturday at 17:35 UTC, saw the attacker make off with 116,500 rsETH, valued at around $292 million. This significant loss accounts for roughly 18% of the total circulating supply of rsETH, which is currently tracked at 630,000 tokens by CoinGecko. The breach has far-reaching implications, as the stolen rsETH was being held as a reserve to back wrapped versions of the token deployed across more than 20 different blockchains, including Base, Arbitrum, Linea, Blast, Mantle, and Scroll. The attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking it into releasing the rsETH to an attacker-controlled address. In response to the attack, Kelp DAO's emergency pauser multisig froze the protocol's core contracts 46 minutes after the breach, at 18:21 UTC. However, two subsequent attempts by the attacker to drain an additional 40,000 rsETH, worth approximately $100 million, were successfully reverted. The incident has sent shockwaves throughout the DeFi community, with several major platforms taking swift action to mitigate potential losses. Aave, for instance, froze its rsETH markets on V3 and V4, while SparkLend and Fluid also froze their respective rsETH markets. The stablecoin issuer Ethena temporarily paused its LayerZero OFT bridges from Ethereum mainnet as a precautionary measure, citing no rsETH exposure and over 101% overcollateralization. Lido Finance has also paused further deposits into its earnETH product, which carries rsETH exposure, while emphasizing that stETH and wstETH remain unaffected. As the situation continues to unfold, the market is bracing for potential bad debt, with AAVE experiencing a 10% decline. The Kelp DAO hack is the latest in a series of high-profile DeFi exploits, including the recent breach of Solana-based perpetuals protocol Drift, which lost approximately $285 million to an attack linked to North Korea-affiliated actors. With the DeFi space facing an unusually hostile period, all eyes are on Kelp DAO as it navigates the fallout from this significant breach and works to recover the stolen funds.