Massive $292 Million Exploit Hits Kelp DAO
A significant attack on Kelp DAO, a liquid restaking protocol, has resulted in the theft of approximately $292 million worth of restaked ether tokens. This incident occurred when an attacker exploited LayerZero's cross-chain messaging layer, tricking it into releasing 116,500 rsETH to an attacker-controlled address. The Kelp DAO protocol, which operates by taking user-deposited ETH and issuing rsETH as a tradeable receipt, had its core contracts frozen 46 minutes after the successful drain in an attempt to mitigate further losses. The attack is believed to be linked to North Korea, marking an escalation in the nation's efforts to target the crypto sector. In a related development, Aave has been affected by the Kelp DAO hack, with the attacker depositing stolen rsETH into Aave as collateral and borrowing approximately $190 million in ETH and related assets. To contain the risk, Aave Labs has frozen rsETH markets and halted new borrowing against the asset. Meanwhile, Coinbase has commissioned a report on the risks posed by quantum computing to the crypto industry, emphasizing the need for preparation and vigilance in the face of emerging technologies.