Massive Exploit: Kelp DAO Loses $292 Million in Cross-Chain Heist
Network News: A recent cross-chain bridge exploit has left Kelp DAO drained of nearly $292 million. The attack, which occurred over the weekend, saw an attacker trick LayerZero's cross-chain messaging layer into releasing 116,500 rsETH to an attacker-controlled address. The Kelp DAO protocol, a liquid restaking protocol built on EigenLayer, allows users to earn additional yield on top of standard Ethereum staking rewards. The bridge that was exploited held a significant portion of the rsETH reserve, which is now at risk. In response to the attack, Kelp's emergency pauser multisig froze the protocol's core contracts, preventing further exploitation. The attack has raised concerns about the security of cross-chain bridges and the potential for similar exploits in the future. Meanwhile, North Korea-linked hackers have been linked to the exploit, marking an evolution in their tactics. The attack on Kelp DAO suggests that these hackers are no longer just looking for bugs or stolen credentials but are now exploiting the underlying assumptions of decentralized systems. The incident has also affected Aave, which has frozen rsETH markets and set loan-to-value ratios to zero to contain the risk. In other news, Coinbase has commissioned a report on the risks of quantum computing to the crypto industry. The report concludes that while current blockchains remain secure, the industry must begin preparing for the potential risks posed by quantum computers. With the increasing plausibility of a fault-tolerant quantum computer capable of breaking widely used encryption, crypto ecosystems must start mapping out their responses to this emerging threat.