Kelp DAO, a leading liquid restaking protocol on EigenLayer, has suffered a major security breach.
On April 18, 2026, an attacker exploited the protocol’s LayerZero-powered cross-chain bridge, draining 116,500 rsETH — approximately $292 million and roughly 18% of the circulating supply.
What Happened (Key Details):
The attacker used a spoofed cross-chain message via LayerZero’s EndpointV2 to trick the bridge into releasing funds.
Stolen rsETH was quickly used as collateral on Aave and other lending platforms, prompting emergency freezes on affected markets (Aave, SparkLend, Fluid, etc.).
Kelp DAO’s emergency multisig promptly paused core contracts and rsETH functionality across mainnet and several L2s to contain the damage.
Early analysis points to a possible private key leak on the source chain rather than a core flaw in LayerZero itself.
This incident highlights the persistent risks in cross-chain infrastructure, even for established restaking protocols. Wrapped assets are now stranded across 20+ chains, adding complexity to any recovery efforts.
Impact So Far:
Significant sell pressure on $ETH AAVE (down ~10% intraday)
Temporary disruption in rsETH liquidity and restaking yields
Renewed scrutiny on bridge security and multisig controls in the DeFi space
What This Means for the Sector:
Kelp DAO has built strong TVL and user trust in liquid restaking. A swift and transparent response from the team — including clear communication and potential compensation
plans — will be critical for long-term recovery.
This event serves as a stark reminder: In DeFi, security audits, key management, and timely incident response matter more than TVL hype. Cross-chain bridges remain one of the weakest links.
Community Takeaways:
Monitor official Kelp DAO channels for updates on asset recovery and post-mortem.
Review your exposure to rsETH and bridged assets.
Stronger emphasis needed on decentralized security practices and insurance protocols.
The DeFi space is resilient, but incidents like this separate well-governed projects from the rest.
What’s your view on this exploit?
Drop 🛡️ if you think Kelp can recover quickly
Drop ⚠️ if you see broader risks for restaking protocols
Drop 💭 with your thoughts or questions
Stay safe out there. Always DYOR and manage risk.
⚠️ Not financial advice. This is for informational purposes only. Crypto involves high risk.
#KelpDAOFacesAttack #DeFiHack #Restaking #LayerZero #EigenLayer #CryptoSecurity #Web3