🔥 “Crypto-Disaster: The $290M Hack that Shook Ethereum and Arbitrum” 😨
Attack date: Sunday, April 19, 2026
#KelpDAOFacesAttack
🕵️‍♂️ The masterstroke

On April 19, an attacker drained more than $290 million from the Kelp DAO ecosystem. The target: the cross-chain bridge of rsETH between Ethereum and Arbitrum. The most alarming thing is that the hacker managed to compromise a legitimate contract that had already been deployed, allowing the heist to take place without raising immediate suspicions.

🌪️ Chaos and financial contagion

Lending protocols like Aave activated emergency brakes to contain the crisis. As a result, the AAVE token plummeted by 18%, reflecting the panic in the DeFi sector. The magnitude of the exploit makes it one of the largest of 2026.

🧩 Modus operandi and cunning of the hacker

The attacker funded their initial addresses through the Tornado Cash mixer, erasing their traces before the strike. But the most surprising thing came afterward: instead of fleeing, they leveraged the stolen funds. According to security firm PeckShield, the attacker deposited the stolen rsETH as collateral in lending markets to borrow Wrapped Ethereum (WETH), multiplying their maneuverability without directly liquidating the stolen assets.

⚠️ Urgent lesson for DeFi

This attack exposes the fragility of cross-chain bridges and the need for extreme audits, even on contracts already considered safe. DeFi remains the wild west: high yields but with systemic risks. The question is not if the next big hack will occur, but when and what measures the protocols will take to prevent it.

🛡️ Innovation cannot outpace security. Stay informed and protect your assets.