Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Vulnerable

In a shocking turn of events, a cross-chain bridge holding nearly a fifth of the circulating supply of a restaked ether token has been compromised, resulting in a staggering loss of $292 million. The attack, which occurred on Saturday at 17:35 UTC, saw 116,500 rsETH siphoned off from Kelp DAO's LayerZero-powered bridge, representing about 18% of the token's total supply. This has triggered a chain reaction, with several DeFi platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets in response to the breach. The attacker exploited LayerZero's cross-chain messaging layer, tricking it into releasing the funds to an attacker-controlled address. The fallout is being felt across over 20 blockchains, where wrapped versions of the token are deployed, leaving holders wondering if their tokens are backed by anything. As the situation unfolds, the DeFi community is bracing itself for potential further contagion, with AAVE's price plummeting by around 10% and other platforms taking precautionary measures to mitigate potential losses. The incident is being investigated by Kelp DAO, LayerZero, and other relevant parties, with the goal of recovering the stolen funds and preventing further damage. This massive heist has highlighted the vulnerabilities of the DeFi ecosystem, coming on the heels of several smaller exploits in recent weeks, including the Drift protocol hack, which lost around $285 million. As the DeFi space navigates this challenging period, the resilience of its platforms and the measures taken to prevent such incidents will be closely watched.