Aave Faces Potential Losses of Up to $230 Million Following Kelp DAO Bridge Exploit

A recent exploit of the Kelp DAO and LayerZero bridge has put lending protocol Aave at risk of losing up to $230 million, depending on the resolution of the situation. The incident, as reported by Aave Labs and LlamaRisk, involves rsETH, a liquid restaking token issued by KelpDAO, which relies on a bridge mechanism to move tokens between blockchains. An attacker manipulated this setup by creating a forged transfer message, resulting in the release of 116,500 rsETH from the Ethereum-side bridge without actual backing. Instead of selling the assets, the attacker used 89,567 rsETH as collateral to borrow approximately $190 million in ETH and related assets across Ethereum and Arbitrum, exposing Aave to potentially impaired collateral. Aave Labs responded by freezing rsETH markets, setting loan-to-value ratios to zero, and halting new borrowing against the asset. The outcome now depends on how Kelp handles the shortfall, with possible scenarios including a 15% depegging of rsETH, resulting in around $124 million in bad debt for Aave, or a more severe impact of up to $230 million in bad debt if losses are isolated to Layer 2 networks. The exploit was caused by weaknesses in Kelp's verification of cross-chain messages using LayerZero, allowing the attacker to extract value from the system. This incident has raised concerns about the safety of interconnected DeFi infrastructure and has led to a withdrawal of around $6 billion in total value locked from Aave. The report notes that Aave's DAO treasury holds approximately $181 million in assets, and discussions are underway to address potential losses, with Kelp's allocation of losses still uncertain.