Kelp DAO’s rsETH bridge apparently exploited for roughly $292 million in LayerZero-based attack
Summary
Kelp DAO suffered a significant security breach when an attacker exploited its LayerZero-powered cross-chain bridge, draining 116,500 rsETH worth approximately $292 million. The attacker utilized an obfuscated wallet funded via Tornado Cash to trigger the vulnerability. In response, Kelp DAO successfully paused its protocol components, preventing further theft during subsequent attack attempts. This incident affects roughly 18% of the total rsETH supply and has raised concerns regarding potential bad debt within related lending protocols like Aave.
(Source:The Block)