todayonchain.com

Kelp DAO’s rsETH bridge apparently exploited for roughly $292 million in LayerZero-based attack

The Block
Kelp DAO's rsETH bridge was exploited for approximately $292 million via a LayerZero attack, prompting the protocol to pause its core operations.

Summary

Kelp DAO suffered a significant security breach when an attacker exploited its LayerZero-powered cross-chain bridge, draining 116,500 rsETH worth approximately $292 million. The attacker utilized an obfuscated wallet funded via Tornado Cash to trigger the vulnerability. In response, Kelp DAO successfully paused its protocol components, preventing further theft during subsequent attack attempts. This incident affects roughly 18% of the total rsETH supply and has raised concerns regarding potential bad debt within related lending protocols like Aave.

(Source:The Block)