Kelp DAO bridge hack hits $292M after 116,500 rsETH drain

Key Point

An attacker drained 116,500 rsETH worth about $292 million from Kelp DAO's LayerZero-powered bridge at 17:35 UTC. The attacker tricked LayerZero's cross-chain messaging layer into accepting a false instruction, which caused Kelp's bridge to release rsETH to an attacker-controlled address. Kelp DAO's emergency pauser multisig froze core contracts 46 minutes later at 18:21 UTC, and two follow-up attempts at 18:26 UTC and 18:28 UTC reverted with the same LayerZero packet. The drained bridge held the reserve backing wrapped rsETH on more than 20 networks. Aave, SparkLend, Fluid, Lido and Ethena paused rsETH-related markets, deposits or bridges after the exploit, and Kelp said at 20:10 UTC that it was investigating with LayerZero, Unichain, its auditors and outside security specialists.

Why it matters: A bridge reserve loss may turn a token wrapper problem into a broader liquidity and redemption shock if holders on other networks rush to redeem into Ethereum.

Market Sentiment

Bearish, Stress-on, Event-driven, Fear.

Reason: The drained bridge was the reserve backing wrapped rsETH on more than 20 networks, so traders may focus on solvency and contagion risk.

Similar Past Cases

The 2022 Wormhole exploit drained 120,000 ETH worth more than $320 million from the Solana-Ethereum bridge, and concern quickly centered on whether wrapped ETH on Solana would still be backed until Jump Trading restored the funds and reopened the bridge. (CoinDesk) Kelp DAO differs because rsETH is a restaked ETH derivative spread across many chains, so redemption pressure may be less concentrated and harder to stabilize.

Ripple Effect

Reserve loss can turn a bridge exploit into a solvency test for every wrapped rsETH deployment. If non-Ethereum holders rush to redeem into Ethereum, then Kelp DAO may face withdrawal pressure on native rsETH and on restaking positions. Lending venues may stay defensive until backing is clearer.

Opportunities & Risks

Opportunities: If Kelp DAO publishes the validation failure and a credible recovery plan, then that may be a re-entry signal for users tracking whether wrapped rsETH regains reliable backing.

Risks: If rsETH redemptions on Ethereum accelerate or more venues extend freezes, then reducing exposure to rsETH-linked positions can limit downside from peg stress and forced unwinds.