Crypto Exploit of 2026: $292 Million Stolen from Kelp DAO, Leaving Wrapped Ether Stranded Across 20 Chains

A significant breach has occurred in the DeFi space, with an attacker successfully draining 116,500 rsETH, valued at around $292 million, from Kelp DAO's cross-chain bridge. This incident has triggered a series of emergency measures across various DeFi platforms, as the stolen funds were used to back wrapped versions of the token on over 20 different blockchains. The attack was made possible by exploiting LayerZero's cross-chain messaging layer, which allowed the attacker to trick the system into releasing the rsETH to an attacker-controlled address. Kelp DAO's emergency response team froze the protocol's core contracts approximately 46 minutes after the attack, but not before the attacker made two follow-up attempts to drain an additional 40,000 rsETH. The impact of this exploit is far-reaching, with holders of wrapped rsETH on non-Ethereum blockchains facing uncertainty about the value of their tokens. This has created a ripple effect, with panic redemptions on layer 2 blockchains potentially forcing Kelp to unwind its restaking positions to honor withdrawals. In response to the incident, several DeFi platforms have taken precautionary measures, including Aave, which froze its rsETH markets on V3 and V4, and SparkLend and Fluid, which also froze their rsETH markets. Lido Finance has paused further deposits into its earnETH product, citing rsETH exposure, while Ethena has temporarily paused its LayerZero OFT bridges from Ethereum mainnet as a precaution. The incident is still under investigation, with Kelp DAO working with LayerZero, Unichain, its auditors, and outside security specialists to determine the cause of the exploit. The recovery of the stolen funds and the potential impact on the DeFi space remain to be seen.