# KelpDAOBridgeHacked

Post-mortem : How $272 Million rsETH Hack Happened 
​On April 18, 2026, the interconnected nature of decentralized finance transformed an external vulnerability into a catastrophic systemic crisis for Aave. A sophisticated attack on Kelp DAO's cross-chain infrastructure resulted in the theft of over $292 million in liquid restaking tokens. By weaponizing Aave's aggressive risk parameters, the attackers extracted $272 million in WETH, leaving ordinary depositors facing permanent losses and exposing the fatal flaws of hyper-composable DeFi architecture.
​❍ The LayerZero Bridge Breach
​The crisis

#KelpDAOBridgeHacked
In a shocking development for the decentralized finance (DeFi) ecosystem, KelpDAO’s bridge has reportedly been compromised, raising fresh concerns about cross-chain security and user fund safety. Early reports suggest that attackers exploited vulnerabilities within the bridge infrastructure, allowing them to siphon off significant assets before the issue was detected.
🔍 What Happened?
Blockchain bridges are designed to facilitate asset transfers between different networks, but they have long been a prime target for hackers due to their complexity. In this case, the explo

#KelpDAOBridgeHacked
THE DAY TRUST WAS TESTED: INSIDE THE KELP DAO BRIDGE INCIDENT AND WHAT IT REALLY MEANS FOR DEFI
This is not just another hack.
And it is definitely not just another headline.
---
WHAT ACTUALLY HAPPENED — BREAKING DOWN THE INCIDENT
The reported compromise involving the Kelp DAO bridge is a reminder of something the market often forgets during bullish phases — infrastructure risk never disappears, it only hides beneath momentum.
A bridge, by design, connects two ecosystems. It allows assets to move across chains, unlocking liquidity and expanding usability. But that same fu

#KelpDAOBridgeHacked 1. The Technical "Forged Message" Exploit
The attack was a masterclass in exploiting composability. The vulnerability sat within the bridge infrastructure (utilizing LayerZero) connecting KelpDAO’s rsETH across multiple chains.
The Forgery: Attackers crafted a malicious cross-chain payload that bypassed the verification layer. The bridge incorrectly "vouched" for the legitimacy of a massive deposit that never occurred on the source chain.
The Mint: This allowed the attacker to mint 116,500 rsETH out of thin air on the target chain.
The "Looping" Drain: Instead of selling

KelpDAO has suffered a devastating exploit, with hackers draining nearly $293 million in rsETH tokens through a cross-chain bridge vulnerability, marking the largest DeFi hack of 2026 so far. The incident has triggered widespread panic across decentralized finance platforms, freezing markets and raising urgent questions about cross-chain security.
---
🔎 What Happened
- Date of Attack: April 18–19, 2026
- Amount Stolen: ~116,500 rsETH, valued at $292–293 million
- Exploit Method: Attackers manipulated LayerZero’s cross-chain messaging system, tricking it into validating fraudulent transa

DeFi'S DARKEST WEEKEND OF 2026 $292M GONE IN 46 MINUTES
April 19–20, 2026 | Confirmed On-Chain
╔══════════════════════════════════════════════════════════╗
║ 💀 FUNDS DRAINED → $292–293 Million ║
║ 🔗 PROTOCOL HIT → Kelp DAO — LayerZero Bridge ║
║ 📉 rsETH SUPPLY HIT → 18% of Circulating Supply ║
║ ⏱️ TIME TO DRAIN → 46 Minutes ║
║ 🌐 CHAINS AFFECTED → 20+ Networks ║
║ 🏦 AAVE TVL LOST → $6.6 Billion in 24 Hours ║
╚══════════════════════════════════════════════════════════╝
◈ 01 — INCIDENT S

#KelpDAOBridgeHacked
The KelpDAO bridge hack marks a pivotal moment for DeFi, showing how vulnerabilities in core infrastructure can trigger widespread systemic risk. The roughly $290M exploit did not stem from a typical smart contract flaw, but from weaknesses in cross-chain message verification linked to LayerZero. By manipulating validation, the attacker minted a large amount of unbacked rsETH that appeared legitimate on-chain.
The real damage unfolded when these fake assets were used as collateral on lending platforms like Aave. This enabled the attacker to drain over $200M in real liquid

#KelpDAOBridgeHacked
The recent Kelp DAO exploit is not just another DeFi incident—it is a structural wake-up call that exposes one of the weakest layers in the crypto ecosystem: cross-chain infrastructure. While many traders focus on token prices and yield opportunities, this event highlights that the real risk often lies beneath the surface, in the systems that connect protocols together. What happened here was not simply a bug or isolated failure. It was a breakdown in trust at the architectural level, and that has implications far beyond a single project.
At its core, the exploit targeted

#KelpDAOBridgeHacked
KelpDAO Bridge Exploit - April 18, 2026: What Happened and Current Status
On April 18, 2026, KelpDAO, a liquid restaking protocol, suffered one of the largest DeFi exploits of the year when its cross-chain bridge was compromised. The attacker managed to drain approximately 116,500 rsETH tokens, valued at roughly $292 million at the time of the incident. This marks the biggest crypto hack of 2026 so far, surpassing the Drift Protocol exploit that occurred earlier in April.
How the Exploit Occurred
The attack exploited a critical vulnerability in KelpDAO's LayerZero-powered