Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Exposed

A catastrophic breach of a cross-chain bridge has led to the theft of nearly 18% of the circulating supply of restaked ether tokens, sparking chaos throughout the DeFi ecosystem. On Saturday, at 17:35 UTC, an attacker exploited Kelp DAO's LayerZero-powered bridge, siphoning off 116,500 rsETH, valued at around $292 million. This breach has significant implications, as the stolen tokens were held as a reserve to back wrapped versions of the token on over 20 other blockchains. The attacker manipulated LayerZero's cross-chain messaging system, deceiving it into releasing the tokens to an attacker-controlled address. In response, Kelp DAO's emergency pauser multisig froze the protocol's core contracts 46 minutes later, at 18:21 UTC, to prevent further damage. The aftermath of this exploit is still unfolding, with numerous DeFi platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets to mitigate potential losses. The incident has raised concerns about the stability of tokens deployed across multiple networks, potentially triggering a wave of panic redemptions and pressure on the unaffected Ethereum supply. As the situation continues to evolve, the long-term impact on the DeFi ecosystem remains uncertain.