Massive Crypto Heist: Kelp DAO Loses $292 Million to Exploit, Leaving 20 Blockchains Vulnerable

A recent and severe exploit has left the DeFi community reeling, as a staggering $292 million was drained from Kelp DAO's LayerZero-powered bridge, which held nearly 18% of the circulating supply of rsETH, a restaked ether token. The incident, which occurred on Saturday at 17:35 UTC, involved an attacker tricking LayerZero's cross-chain messaging layer into releasing 116,500 rsETH to an attacker-controlled address. The bridge, which served as the reserve backing wrapped versions of rsETH on over 20 other blockchains, was effectively drained, leaving holders on non-Ethereum deployments questioning the validity of their tokens. In response, Kelp's emergency pauser multisig froze the protocol's core contracts, while Aave, SparkLend, and Fluid froze their rsETH markets to mitigate potential damage. The fallout is still unfolding, with the potential for widespread contagion and significant financial losses. As the investigation into the exploit continues, the DeFi community remains on high alert, with many protocols taking precautionary measures to protect themselves and their users from potential exploitation. With the incident still developing, it remains to be seen how the situation will be resolved and what the long-term implications will be for the DeFi space.