Kelp DAO Suffers $292 Million Exploit: A DeFi Crisis Unfolds

A recent cyber attack has drained nearly $292 million from Kelp DAO, a liquid restaking protocol, sparking a crisis in the DeFi sector. The attack occurred when an attacker tricked LayerZero's cross-chain messaging layer into releasing 116,500 rsETH to an attacker-controlled address. Kelp DAO's emergency pauser multisig froze the protocol's core contracts 46 minutes after the successful drain. The attack has raised concerns about the security of cross-chain bridges and the potential for North Korea-linked hackers to exploit decentralized systems. In a related incident, hackers tied to North Korea appear to have pulled off another major exploit, targeting crypto trading firm Drift. The two incidents point to a more organized effort by North Korea to hijack funds from the crypto sector. Meanwhile, Aave has been affected by the Kelp DAO hack, with the attacker depositing 89,567 rsETH into Aave as collateral and borrowing roughly $190 million in ETH and related assets. The outcome depends largely on how Kelp handles the shortfall, with potential losses estimated at $124 million to $230 million for Aave. In other news, Coinbase has commissioned a report on the risks of quantum computing to the crypto industry, stressing the need for preparation and highlighting the potential for a 'fault-tolerant quantum computer' to break widely used encryption.