A massive $292 million hack has sent shockwaves through the cryptocurrency industry, revealing deep-seated vulnerabilities in DeFi infrastructure and sparking fears of a broader market crisis. The attack, which targeted Kelp's rsETH token, exploited a single point of failure that allowed the hacker to create large amounts of unbacked tokens and use them as collateral to drain real assets from lending protocols, primarily Aave. As investigations continue, experts point to a single-signer setup as the weak link in the system, enabling the attacker to mint tokens without proper backing. The incident has significant implications for DeFi, with lending platforms now holding potentially worthless collateral and facing the risk of a 'bank run' as users rush to withdraw funds.
With trust in DeFi protocols already eroded, the attack serves as a stark reminder of the sector's interconnectedness and the need for robust security measures to prevent such incidents in the future.