FaithHQ

Aave has released a post-incident investigation regarding the rsETH event on April 18. According to Foresight News, the liquidity staking protocol Kelp's rsETH LayerZero V2 cross-chain bridge accepted a forged message during the cross-chain process from Unichain to Ethereum. This resulted in the release of 116,500 rsETH on the Ethereum side without a corresponding burn on the Unichain side. Aave stated that the attack occurred through third-party cross-chain bridge infrastructure, with the attacker depositing the stolen rsETH into eight Aave V3 positions and borrowing 82,650 WETH and 821 wstETH, impacting the Aave market.Aave reported that the rsETH held by the attacker on Arbitrum has been destroyed, and the LayerZero OFT adapter has replenished 116,131.72 rsETH in five batches. The asset backing for rsETH has been fully restored, and the affected WETH and rsETH markets have returned to normal.