According to a recent LinkedIn post from Messari, the recent $292 million exploit of Kelp DAO’s liquid restaking protocol is being analyzed as a case study in bridge and cross-chain security. The post attributes the root cause to Kelp’s bridge configuration, which relied on LayerZero’s EndpointV2 and a 1-of-1 Decentralized Verification Network setup that allowed forged cross-chain messages.
Claim 55% Off TipRanks
- Unlock hedge fund-level data and powerful investing tools for smarter, sharper decisions
- Discover top-performing stock ideas and upgrade to a portfolio of market leaders with Smart Investor Picks
The post suggests that the compromise of two LayerZero DVN nodes enabled attackers, believed to be North Korea’s Lazarus Group, to simulate rsETH burns and trigger unauthorized releases of 116,500 rsETH without collateral. Subsequent contagion reportedly included wrapped rsETH depegging across more than 20 chains and the pausing of rsETH contracts on Ethereum mainnet and several L2 networks.
According to the metrics cited, downstream impacts extended to major DeFi platforms, with Aave’s bad debt estimated at $123.7 million to $230.1 million in unrecoverable losses and its TVL falling from about $45.8 billion to $35.7 billion. The broader DeFi total value locked was described as declining by more than $13 billion within 48 hours, while the AAVE token fell roughly 25% and WETH markets reportedly hit 100% utilization, prompting $6.2 billion in lender outflows.
As shared in the post, early responses have included the Arbitrum Security Council freezing approximately 30,766 ETH linked to the exploit, Kelp suspending all rsETH contracts across mainnet and L2s, and LayerZero prohibiting 1-of-1 DVN configurations going forward. Kelp is also said to be considering a 16% proportional loss socialization for rsETH holders, which could influence user confidence and recovery dynamics across affected protocols.
For investors, the analysis underscores growing tail risks around cross-chain infrastructure and configuration choices within DeFi, beyond pure smart contract logic. The post implies heightened regulatory and market scrutiny for liquid restaking and bridge providers, and it may accelerate demand for more robust validation networks, diversified security assumptions, and risk-adjusted returns in DeFi lending and restaking strategies.