Crypto Heist of 2026: Kelp DAO Loses $292 Million in Major Exploit

In a shocking turn of events, an attacker successfully drained nearly 18% of the circulating supply of restaked ether tokens from Kelp DAO's LayerZero-powered bridge, sparking widespread panic and emergency contract freezes across the DeFi landscape. The attack, which occurred on Saturday at 17:35 UTC, saw the perpetrator trick LayerZero's cross-chain messaging system into releasing 116,500 rsETH to an attacker-controlled address, valued at roughly $292 million. This unprecedented heist has sent shockwaves throughout the crypto community, with the stolen funds now dispersed across over 20 blockchain networks, including Base, Arbitrum, and Scroll. The fallout is being felt far and wide, with Aave, SparkLend, and Fluid all freezing rsETH markets in response to the exploit, while Lido Finance has paused further deposits into its earnETH product due to its exposure to rsETH. As the situation continues to unfold, one thing is clear: the future of Kelp DAO and the broader DeFi ecosystem hangs in the balance, with the potential for further contagion and instability looming large.