Kelp DAO rsETH bridge hacked for $292 million! Triggering chain reaction of freezes on Aave and Compound

📄Full Article· Automatically extracted by trafilaturaGemini 翻譯1860 words

The rsETH cross-chain bridge of the DeFi restaking protocol Kelp DAO has been hit by a major hack, resulting in a loss of approximately $292 million and becoming the largest DeFi exploit of 2026 to date. The attacker leveraged the LayerZero cross-chain infrastructure to forge verification messages, stealing over 18% of the circulating supply of rsETH and creating over $280 million in bad debt across multiple lending protocols, triggering a chain-wide freeze. (Previous coverage: Capital backing and airdrop frenzies: How the restaking LRT sector became a "new gold rush") (Background: EigenLayer discloses 5 major rules for staking rewards; Justin Sun becomes the biggest winner with 5.37 million $EIGEN) The DeFi sector suffered another brutal night today (19th). The Kelp DAO rsETH cross-chain bridge was hacked, with 116,500 rsETH drained in a single transaction. At the time of the attack, this was worth approximately $292 million, accounting for 18% of the total circulating supply of 630,000 rsETH. This surpasses the Drift Protocol incident on April 1st of this year ($285 million), making it the largest DeFi loss of 2026. The core of this attack was a forgery exploit targeting the LayerZero cross-chain messaging infrastructure. LayerZero is a communication protocol that allows different blockchains to "talk" to each other: simply put, it allows Chain A to tell Chain B, "Someone has deposited money here, you can allow them to withdraw it there." The attacker forged a fake verification message, tricking the Kelp bridge contract into believing there was a legitimate transfer request on another chain, which led it to release 116,500 rsETH directly to an address controlled by the hacker. Kelp DAO announced an emergency suspension of rsETH deposit and withdrawal functions on mainnet and all Layer 2 networks earlier today. Earlier today we identified suspicious cross-chain activity involving rsETH. We have paused rsETH contracts across mainnet and several L2s while we investigate. We are working with @LayerZero_Core, @unichain, our auditors and top security experts on RCA. We will keep you… — Kelp (@KelpDAO) April 18, 2026 According to analysis, the attacker did not immediately swap the stolen rsETH. Instead, they deposited it into mainstream lending platforms such as Aave V3, Compound V3, and Euler, using rsETH as collateral to borrow approximately 74,000 ETH. This maneuver created over $236 million in debt positions across various protocols. Combined with the initial theft, a total of over $280 million in bad debt is now spreading throughout the DeFi ecosystem. The chain reaction triggered by this event spread rapidly across the entire DeFi ecosystem. Aave announced the freezing of its V3 and V4 rsETH markets, emphasizing that "Aave's contracts have not been exploited and this is an exploit related to rsETH." SparkLend and Fluid followed suit, freezing their respective rsETH-related markets. The rsETH markets on Aave V3 and Aave V4 have been frozen. Aave's contracts have not been exploited and this is an exploit related to rsETH. The freeze follows an exploit of the Kelp DAO rsETH bridge. Freezing the rsETH markets prevents new deposits and borrowing against rsETH… — Aave (@aave) April 18, 2026 Lido Finance, also exposed due to its holdings of rsETH, decided to suspend earnETH deposits. Although Ethena has no direct exposure to rsETH, it preemptively suspended its LayerZero bridging functionality on the Ethereum mainnet. rsETH is a representative asset in the restaking sector, and its security has been highly trusted. With LayerZero, a core player in cross-chain infrastructure, becoming the springboard for this attack, all protocols relying on cross-chain bridges are now under pressure to re-examine their security architectures. Kelp DAO has not yet released a detailed remediation plan, and the freeze status across various protocols remains in effect. On-chain investigations are ongoing, with ZachXBT stating that he is tracking the flow of funds and assessing whether the attack is linked to any known hacker organizations.

Data Status✓ Full text extractedRead Original (動區 BlockTempo)

🔍Historical Similar Events· Keyword + Asset Matching6 items

2026-04-19

Kelp DAO suffers rsETH bridge hack! $292 million stolen, triggering chain reaction of freezes on Aave and Compound

2026-04-21

Kelp DAO hack triggers "DeFi chain reaction": Aave faces potential bad debt of up to $230 million

Similarity 220%關鍵字 dao/aave/kelp同分類 zh

2026-04-19

Aave USDT lending and borrowing APY surges to 15%! Kelp DAO hack triggers a flight to safety, liquidity drained

Similarity 220%關鍵字 dao/aave/kelp同分類 zh

2026-04-19

DeFi bombshell: Kelp DAO cross-chain bridge hacked, resulting in nearly $300 million in losses and affecting multiple lending protocols