Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Blockchains Exposed

A devastating breach occurred on Saturday, with an attacker siphoning off nearly $292 million worth of rsETH from Kelp DAO's LayerZero-powered bridge, which held approximately 18% of the token's total circulating supply. The attack was carried out by tricking the bridge into releasing the funds to an attacker-controlled address, exploiting a vulnerability in LayerZero's cross-chain messaging system. The stolen rsETH was part of a reserve backing wrapped versions of the token on over 20 blockchains, including Base, Arbitrum, and Scroll. In response to the attack, Kelp DAO's emergency pauser multisig froze the protocol's core contracts, while other DeFi platforms such as Aave, SparkLend, and Fluid took measures to mitigate potential losses. The incident raises concerns about the stability of the DeFi ecosystem, particularly given the recent string of high-profile exploits, including the $285 million heist from Solana-based perpetuals protocol Drift. As the situation continues to unfold, the fate of the stolen funds and the potential consequences for the DeFi market remain uncertain.