Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Disrupting DeFi Ecosystem

A devastating cyber attack has struck the DeFi world, as a hacker breached Kelp DAO's LayerZero-powered bridge, siphoning off 116,500 rsETH, equivalent to approximately $292 million. The incident, which occurred on Saturday at 17:35 UTC, has sent shockwaves throughout the DeFi ecosystem, prompting several major platforms, including Aave, SparkLend, and Fluid, to freeze their rsETH markets. The attacker manipulated LayerZero's cross-chain messaging layer, deceiving it into releasing the rsETH to a malicious address. Kelp DAO's emergency response team sprang into action, freezing the protocol's core contracts 46 minutes later, but not before the attacker attempted two further drain attempts. The stolen funds were part of the reserve backing wrapped versions of rsETH on over 20 blockchain networks, leaving holders on non-Ethereum deployments uncertain about the value of their tokens. The fallout from the exploit is still unfolding, with AAVE's price plummeting 10%, and several other platforms taking precautionary measures to mitigate potential losses. As the investigation into the incident continues, the DeFi community holds its breath, awaiting news of potential recoveries and wondering what other repercussions this massive heist may have.