#KelpDAOExploitFreeze
What do you think about what happened to Kelp DAO?
On April 18 and 19, 2026, Kelp DAO faced a major cyberattack in the decentralized finance (DeFi) space, leading to an estimated loss of $293 million (116,500 rsETH) due to a vulnerability in the LayerZero bridge that utilized a weak one-to-one authentication system.
The attackers exploited vulnerabilities in the RPC contracts and launched DDoS attacks to facilitate fraudulent withdrawals.
In response, around $71 million was frozen, Kelp DAO temporarily paused its contracts, and prevented another attack worth roughly $95 million. Lending platforms also halted their rsETH markets to mitigate risks.
Estimated losses range from $124 million to $230 million. Two options are being proposed: either distribute the losses to all users at about 15%, or restrict it to second-level users at a rate of 71%. The situation is currently under administrative review.
#KelpDAOExploitFreeze