Kelp DAO Exploit Results in $292 Million Loss
- An attacker drained 116,500 rsETH from Kelp DAO’s LayerZero bridge, valued at approximately $292 million, representing about 18% of the token’s circulating supply.
- The exploit occurred on a cross-chain messaging layer, where the attacker manipulated data inputs to approve unauthorized transactions.
- Following the incident, Kelp DAO paused its contracts within 46 minutes, but two subsequent drain attempts were reverted.
- The attacker used part of the stolen funds to deposit 89,567 rsETH into Aave as collateral, borrowing around $190 million.
- If losses are socialized among all rsETH holders, it could lead to a depegging of around 15%, resulting in an estimated $124 million in bad debt for Aave.
The Kelp DAO exploit highlights vulnerabilities in decentralized finance (DeFi) systems and raises concerns about security measures against sophisticated attacks. With over $500 million lost across recent exploits linked to North Korean hackers, the urgency for enhanced security protocols is clear.
This incident underscores significant risks in DeFi ecosystems, particularly with Kelp’s loss of $292 million, which may impact multiple networks and users across the crypto space. (Source)
