KelpDAO exploit for LayerZero drain $293M rsETH because of cross-chain flaw
KelpDAO LayerZero exploit don koshẹ another high point for Q2 2026 DeFi security loss, with im reported cyber damage wey top $840M, and cross-chain bridge failure take big share.
Attackers drain 116,500 rsETH (about $293M). Breach no be bug for KelpDAO Ethereum staking contracts. Instead, KelpDAO LayerZero exploit use one trust point for LayerZero Omnichain Fungible Token (OFT) cross-chain message routing.
According to latest story, hackers inject fake state instructions. Smart contracts run well-well, but dem process fabricated message wey wrongly confirm off-chain asset deposit. That one trigger unauthorized release and mint ~18% of rsETH supply—e dilute pool, e drain underlying liquidity. Report say first part of exploit finish for 1m48s, and within almost two hours, money gather for master hacker wallet.
Impact on DeFi markets: stolen rsETH quickly post as collateral for secondary lending venues, so borrowers fit pull roughly $236M USDC/USDT before risk oracles react. Aave appear among the most exposed protocols for earlier reporting, and later details show say e be rapid downstream leverage pressure—no be say original protocol directly get hacked. Arbitrum Security Council later freeze 30,766 ETH (over $71M) tied to incident. Remaining funds route through THORChain go BTC, and dem partially launder am via Tornado Cash plus other privacy-style cross-chain routes.
Trader takeaway: Treat KelpDAO LayerZero exploit as composability contagion. For traders, na near-term tail risk increase for tokenized assets and bridge-dependent flows, and e likely say collateral rules go tighten, while lending/approval practices go more conservative.
Bearish
E get bearish effect for the immediate price of the ecosystem wey don get hit (no be say e must be direct bug for rsETH contract). KelpDAO LayerZero exploit pump am plenty supply, break market own collateral assumptions, then allow quick recycling of collateral go big lending venues before risk controls update. This kind combination often increase fear for liquidation and credit risk, make risk premium for tokenized assets gree bigger, and fit put pressure on related prices for short term. For long run, if people expect stricter collateral, bridge isolation, and better approval hygiene, e fit stabilize things, but near-term sentiment still dey negative until losses and bad-debt scope fully clear and handle.