Fellow Binancians,
The DeFi ecosystem is facing its biggest crisis of 2026. KelpDAO, a leading Liquid Restaking Protocol, has been hit by a massive security breach, resulting in a staggering loss of approximately $293 Million. This exploit is not just a KelpDAO issue; it has triggered a systemic risk across the entire DeFi landscape.
What Happened? (The LayerZero Breach)
Early on April 19, 2026, an attacker exploited the LayerZero Endpoint V2 contract. By forging cross-chain messages, the hacker successfully tricked the Kelp bridging contract into releasing 116,500 rsETH (about 18% of the total circulating supply).
The Structural Crisis: Aave in the Crossfire
The real danger emerged in the second phase of the attack:
The Trap: The hacker deposited the illicitly minted rsETH into Aave V3 and V4 as collateral.
The Drain: Since rsETH was considered high-quality collateral at that moment, the attacker managed to borrow over $236 Million in real ETH and WETH.
Liquidity Crunch: Aave’s ETH pool hit 100% utilization, meaning there was almost no ETH left for regular users to withdraw.
Market Reaction & Impact
Aave Response: Aave has officially frozen the rsETH markets to prevent further bad debt.
Token Prices: In the last 24 hours, $AAVE dropped by nearly 19%, while $ZRO (LayerZero) fell by 20%.
Whale Panic: Reports show massive outflows, with major whales withdrawing millions in ETH to secure their holdings.
Action Required for Users:
Avoid New Deposits: Do not deposit into KelpDAO or use rsETH as collateral until an official recovery plan is announced.
Monitor Lending Positions: If you have active positions on Aave, monitor the ETH utilization rates closely.
Official Channels Only: Follow only verified updates from KelpDAO and Aave to avoid phishing scams during this panic.
This incident serves as a grim reminder of the risks involved in Liquid Restaking Tokens (LRTs). As the "Biggest Exploit of 2026," it will likely lead to stricter regulations and safer collateral parameters in the future.
Stay Alert. Manage Your Risk. Protect Your Assets.
#KelpDAOFacesAttack #DefiExploit #Aave #CryptoSecurity #LayerZero $AAVE