Crypto Platform Suffers Massive $292 Million Loss in 2026's Biggest Exploit

A devastating exploit has hit the Kelp DAO platform, resulting in the theft of approximately $292 million worth of restaked ether. The attack occurred on Saturday at 17:35 UTC, when an attacker successfully tricked the platform's LayerZero-powered bridge into releasing 116,500 rsETH to a malicious address. The stolen funds represent about 18% of the token's circulating supply, sparking widespread concern across the DeFi ecosystem. In response, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, while other platforms such as Aave, SparkLend, and Fluid have also taken measures to mitigate potential losses. The incident has sent shockwaves through the market, with AAVE's price plummeting by around 10% as investors grapple with the potential implications of the exploit. As the situation continues to unfold, the fate of rsETH's peg remains uncertain, and the DeFi community is left to ponder the long-term consequences of this massive breach.