Major Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving Wrapped Ether Stranded Across 20 Blockchains

A significant breach occurred on Saturday, with an attacker draining nearly 18% of the circulating supply of restaked ether tokens from Kelp DAO's LayerZero-powered bridge, valued at roughly $292 million. This incident has triggered a wave of emergency responses across the DeFi ecosystem, including Aave, SparkLend, and Fluid, which have frozen their rsETH markets. The attack exploited a vulnerability in LayerZero's cross-chain messaging layer, allowing the attacker to trick the system into releasing 116,500 rsETH to a controlled address. The fallout from this incident is still unfolding, with the potential for further contagion and instability in the DeFi market. The affected token, rsETH, is deployed across over 20 networks, including Base, Arbitrum, and Scroll, and the drained reserve was backing wrapped versions of the token on these networks. As a result, holders of these tokens are facing uncertainty, and the market is bracing for potential panic redemptions and further price volatility. The incident has already led to a 10% drop in AAVE's price, and other platforms, such as Lido Finance, have taken precautionary measures to mitigate potential losses. The investigation into the incident is ongoing, with Kelp DAO working with LayerZero, Unichain, and security specialists to determine the cause of the exploit and potential recovery options.