Major rsETH Exploit Highlights Ongoing DeFi Bridge and Counterparty Risks

According to a recent LinkedIn post from The Block, an attacker appears to have drained 116,500 rsETH from Kelp DAO’s LayerZero-powered cross-chain bridge on Saturday, with an indicated value of about $292 million at current market prices. The post notes that Kelp’s emergency pauser multisig froze core protocol contracts roughly 46 minutes after the drain, reportedly blocking two subsequent attempts.

The Block’s coverage indicates that Kelp DAO acknowledged the incident and is investigating it alongside LayerZero and Unichain, suggesting an active incident-response and forensic phase. Aave is described as having frozen rsETH markets on its V3 and V4 deployments and as planning to “explore paths to offset the deficit” from any bad debt, moves that may limit immediate contagion but highlight counterparty and smart-contract risk across DeFi platforms.

For investors following the broader decentralized finance ecosystem rather than these private entities specifically, the episode underscores ongoing security vulnerabilities in cross-chain bridge infrastructure and liquid staking assets such as rsETH. The post also implies that leading protocols may prioritize rapid risk containment and potential loss socialization or remediation, factors that could influence user confidence, liquidity flows, and ultimately valuations across the sector over time.