src=”https://cdn.bankless.com/posts/full/2026-04-20/kelp-dao-bridge-drained-for-292m-in-rseth-featured-image-69e3f954df8f8a00014ef2c7.jpg?class=articlebody” alt=”Kelp DAO Bridge Drained for $292M in rsETH” />
The decentralized finance space was jolted this past Saturday as a significant exploit targeting Kelp DAO’s cross-chain bridge resulted in the loss of 116,500 rsETH, valued at approximately $292 million. This incident, one of the largest of the year, underscores the persistent security challenges in cross-chain interoperability, with immediate repercussions felt across major protocols like Aave.
Key Takeaways
- A substantial exploit on Kelp DAO’s bridge drained 116,500 rsETH ($292M).
- The attack vector appears to be a vulnerability within Kelp’s LayerZero OFT bridge integration.
- Aave has taken swift action, freezing rsETH markets on its V3 and V4 platforms to mitigate further fallout and is assessing potential bad debt.
- The stolen rsETH represents roughly 18% of the total supply, causing a notable dip in the AAVE token price.
- The incident highlights ongoing security risks associated with cross-chain communication protocols.
The exploit was executed by triggering a specific LayerZero EndpointV2 call, which allowed the attacker to transfer the large sum of rsETH to a wallet that was subsequently funded via Tornado Cash. Kelp DAO was able to halt further losses within an hour of the incident, but the damage was already done. The protocol’s reliance on LayerZero for its cross-chain functionality proved to be its Achilles’ heel in this instance.
Aave’s Response and Potential Fallout
Following the exploit, Aave moved rapidly to safeguard its ecosystem. The lending giant announced the immediate freezing of rsETH markets on both its V3 and V4 platforms. This measure prevents rsETH from being borrowed or used as collateral, effectively isolating it from further contagion. Aave has also stated it is actively assessing its potential exposure and the possibility of bad debt, indicating a readiness to explore solutions to cover any shortfall.
The stolen amount represents roughly 18% of the total rsETH supply, a significant chunk that has understandably caused concern within the DeFi community. The AAVE token saw a price drop of approximately 10% in the wake of the news, reflecting market sentiment regarding the stability and security of protocols within the broader DeFi ecosystem.
This event serves as a stark reminder for all participants in the DeFi arena, especially those engaging with cross-chain protocols and liquid staking derivatives. While the swift action by Aave demonstrates a commitment to user protection, the underlying vulnerabilities in bridge technology remain a critical area for ongoing research and development.
Potential Value Analysis
While this exploit represents a significant loss for Kelp DAO and has caused ripple effects, it also highlights areas of high value and potential reward for those who are vigilant. The sheer volume of assets locked in bridges and liquid staking protocols indicates substantial economic activity. For early-stage participants and alpha hunters, understanding the mechanics of these exploits and the security measures in place can provide invaluable insights. Analyzing which protocols are actively working to secure these high-value assets, and how they respond to such incidents, can guide future investment decisions. Protocols that demonstrate robust security, transparent communication, and effective risk management in the face of such challenges are likely to be the long-term winners.
Learn more at : www.bankless.com