Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchain Networks Vulnerable

A devastating hack has struck a cross-chain bridge, resulting in the loss of nearly a fifth of a restaked ether token's circulating supply. The breach occurred when an attacker exploited a vulnerability in LayerZero's cross-chain messaging layer, tricking the system into releasing 116,500 rsETH, valued at around $292 million, to an attacker-controlled address. This has triggered a chain reaction, with multiple DeFi platforms, including Aave, SparkLend, and Fluid, freezing rsETH markets to mitigate potential losses. The attack has also raised concerns about the stability of wrapped versions of the token deployed on over 20 blockchain networks, as the reserve backing these tokens has been depleted. As a result, holders of rsETH on non-Ethereum deployments are facing uncertainty about the value of their tokens, leading to a potential feedback loop of panic redemptions and pressure on the unaffected Ethereum supply. The incident has also led to a decline in AAVE's value, with the token falling by around 10% as the market assesses the potential impact of the exploit. Several other DeFi platforms, including Lido Finance and Ethena, have taken precautionary measures to prevent potential losses. The Kelp DAO team has acknowledged the incident and is investigating the breach with the help of LayerZero, Unichain, and outside security specialists. The outcome of this incident will depend on how much of the cross-chain float tries to redeem into ETH on Ethereum and whether Kelp can recover any portion of the stolen funds before the trail goes cold.