Massive Exploit: Kelp DAO Loses $292 Million in Cross-Chain Heist

A recent network breach has left Kelp DAO, a liquid restaking protocol, reeling after an attacker drained approximately $292 million worth of rsETH (restaked ether) from its LayerZero-powered bridge. This significant loss accounts for roughly 18% of rsETH's circulating supply. The exploit occurred when the attacker manipulated LayerZero's cross-chain messaging layer, tricking it into releasing 116,500 rsETH to an attacker-controlled address. Kelp DAO's emergency response froze the protocol's core contracts 46 minutes after the attack, but not before two follow-up attempts were made to drain an additional 40,000 rsETH. Experts suggest that this incident, combined with a recent hack on crypto trading firm Drift, indicates an escalation in North Korea's efforts to exploit the crypto sector, with over $500 million siphoned in just two weeks. The Kelp exploit highlights the vulnerability of decentralized systems to manipulation, rather than a direct breach of encryption. The fallout from this attack has also affected Aave, which has frozen rsETH markets and halted new borrowing against the asset to contain the risk. Meanwhile, a report commissioned by Coinbase warns that while current blockchains remain secure, the advent of a 'fault-tolerant quantum computer' capable of breaking widely used encryption is increasingly plausible, emphasizing the need for preparation and potential quantum-resistant solutions.