An attacker drained approximately $292 million worth of rsETH tokens from Kelp DAO's LayerZero-powered cross-chain bridge on Saturday. Kelp paused all rsETH contracts following the breach.
The attack targeted Kelp DAO's bridge infrastructure built on LayerZero, a cross-chain messaging protocol. The attacker successfully extracted 116,500 rsETH tokens before the protocol's operators detected the breach and halted operations.
rsETH is Kelp DAO's liquid restaking token, designed to allow users to earn additional yields on staked Ethereum. The loss represents a significant security incident in the liquid staking sector, which has faced multiple high-profile exploits in recent years.
Kelp immediately paused all rsETH contracts to prevent further losses and contain the damage. The incident highlights ongoing risks in cross-chain bridge protocols, which remain a common attack vector in decentralized finance.
Details regarding the attack vector and whether the vulnerability existed in Kelp's smart contracts or LayerZero's infrastructure were not immediately available. Recovery plans and affected user compensation have not been announced.
The SEC has postponed a plan that would have granted broad exemptions allowing US crypto firms to trade tokenized versions of stocks. The delay affects a significant expansion of crypto assets linked to traditional equities.
Kelp DAO has completed recovery of its restaked Ether token following a five-week effort to address a $293 million exploit attributed to North Korea's Lazarus Group in April.
Morgan Stanley launched a cryptocurrency trading pilot on E*Trade with lower fees than Coinbase, Robinhood, and Charles Schwab. The firm plans a broader rollout in 2026.
Crypto exchange Bullish agreed to acquire UK-based financial services outsourcing firm Equiniti from Siris Capital for $4.2 billion. The deal is expected to close in January 2027.