Massive Crypto Heist: Kelp DAO Loses $292 Million in Cross-Chain Exploit

A devastating cross-chain bridge attack has left Kelp DAO reeling, with nearly 18% of the circulating supply of restaked ether tokens, rsETH, being drained in a single attack. The incident, which occurred on Saturday at 17:35 UTC, saw an attacker exploit LayerZero's cross-chain messaging layer to trick the bridge into releasing 116,500 rsETH to an attacker-controlled address, worth around $292 million at current prices. This significant loss has triggered a ripple effect across the DeFi landscape, with several major platforms, including Aave, SparkLend, and Fluid, freezing their rsETH markets in response to the exploit. The attack has raised concerns about the potential for further contagion, as the drained rsETH was the reserve backing wrapped versions of the token on over 20 other blockchains, leaving holders on non-Ethereum deployments uncertain about the value of their tokens. As a result, the DeFi community is bracing for potential panic redemptions and further market volatility, with the incident highlighting the ongoing risks and challenges faced by the industry.