Kelp DAO Suffers $293M Bridge Exploit, Aave Left With $200M+ Bad Debt
Kelp DAO Suffers $293M Bridge Exploit, Aave Left With $200M+ Bad Debt
Kelp DAO has experienced a significant security breach, losing $293 million in a bridge exploit. An attacker minted unbacked rsETH via Kelp's LayerZero bridge, subsequently borrowing Wrapped Ethereum (WETH) from Aave V3 and V4. This exploit has left the Aave protocol with over $200 million in bad debt, underscoring critical vulnerabilities in DeFi ecosystems.
A major security incident has impacted Kelp DAO, resulting in a substantial loss of $293 million due to an exploit on its LayerZero bridge. The attacker's method involved minting unbacked rsETH tokens, which were then utilized to borrow a significant amount of Wrapped Ethereum (WETH) from the Aave V3 and V4 lending pools. This sophisticated maneuver was executed before market safeguards could effectively freeze the affected markets.
The fallout from this exploit is severe, not only for Kelp DAO but also for the broader decentralized finance (DeFi) ecosystem, particularly the Aave protocol. Aave, a leading lending platform, is now contending with over $200 million in bad debt directly attributable to this incident. The event highlights persistent security challenges within bridge technologies and liquid restaking protocols, prompting urgent calls for enhanced auditing and risk management strategies across interconnected DeFi platforms.