Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

A severe security breach has occurred in the DeFi space, with an attacker successfully draining nearly 18% of the circulating supply of restaked ether (rsETH) from Kelp DAO's LayerZero-powered bridge. The incident, which took place on Saturday at 17:35 UTC, saw the theft of 116,500 rsETH, worth roughly $292 million at current prices. This substantial loss has triggered a series of emergency measures across various DeFi platforms, including Aave, SparkLend, and Fluid, which have frozen their rsETH markets in response to the attack. The breach has also led to a significant drop in the value of AAVE, with the token falling by approximately 10% as the market reacts to the potential for bad debt. The attack has raised concerns about the stability of the DeFi ecosystem, particularly given the recent string of exploits targeting smaller protocols such as CoW Swap, Zerion, Rhea Finance, and Silo Finance. With the stolen funds now at risk of being laundered through Tornado Cash, the pressure is on Kelp DAO to recover the lost assets and prevent further damage to the already fragile DeFi landscape.