Massive Crypto Heist: $292 Million Stolen from Kelp DAO, Leaving 20 Chains Exposed

A devastating cyber attack has struck Kelp DAO, a liquid restaking protocol, resulting in the theft of 116,500 rsETH, equivalent to around 18% of the token's circulating supply. The breach, which occurred on Saturday at 17:35 UTC, has significant implications for the DeFi ecosystem, with the attacker exploiting a vulnerability in LayerZero's cross-chain messaging layer to trick the bridge into releasing the funds to a controlled address. The aftermath of the incident has seen a flurry of emergency responses, with Kelp DAO freezing its core contracts and multiple platforms, including Aave, SparkLend, and Fluid, halting rsETH markets to mitigate potential losses. The attack has also raised concerns about the potential for a broader contagion, with the value of AAVE falling by around 10% as the market reacts to the news. As the situation continues to unfold, the DeFi community is left to grapple with the consequences of this major security breach, which has exposed the vulnerabilities of cross-chain bridges and the interconnectedness of the ecosystem. With the attacker's ability to move funds across 20 different chains, the incident has sparked fears of a wider crisis, prompting calls for increased vigilance and cooperation among DeFi platforms to prevent similar incidents in the future.