$290 Million Exploit Linked to Kelp DAO’s Setup Flaw
- An attacker stole approximately $290 million by exploiting Kelp DAO’s LayerZero-powered rsETH bridge.
- The exploit involved draining around 116,500 Restaked ETH (rsETH) due to a single point of failure in Kelp’s decentralized verifier network (DVN).
- Aave’s total value locked (TVL) decreased by about $8.9 billion to $17.5 billion following the incident, resulting in $195 million in “bad debt.”
- LayerZero has advised applications to switch from a single DVN setup to multi-DVN configurations to prevent future exploits.
- Investor concerns over liquidity have raised risks for liquidations on Aave, particularly affecting Ether (ETH) collateral.
The Kelp DAO exploit highlights vulnerabilities in decentralized finance setups, with ongoing debates regarding responsibility for the losses among stakeholders like Kelp DAO and LayerZero. The incident has prompted urgent calls for improved security practices across DeFi platforms.
As a result of this exploit, Aave’s TVL fell significantly, underscoring the critical impact of security flaws within DeFi ecosystems on overall market stability.
