CriticalActiveNo recent activityExploitINC-C85502

Kelp DAO $292M Exploit

Confidence97% · High
TypeExploit
Est. Loss$500.0M
Signals3
First DetectedApr 27, 2026, 6:00 AM
Last SignalApr 21, 2026, 12:00 AM

Overview

Bridge exploit led to $292M loss and undercollateralization risk.

Attackers drained 116,500 rsETH from a LayerZero bridge across 20+ chains, leaving some undercollateralized.

Protocols
Kelp DAOLayerZeroDriftKelpAaveAave LabsArbitrum Security CouncilEtherFiCompound
Chains
EthereumArbitrum
Assets
rsETHETHAAVEARB

Sources & Timeline

  1. NewCoinDesk95%

    Hackers manipulated Kelp's single-verifier cross-chain setup to approve false transactions.

    Apr 20, 2026, 9:17 PMRead on Bytewit →
  2. NewCoinDesk95%

    Bridge exploit led to $292M loss and undercollateralization risk.

    Apr 22, 2026, 9:25 AMRead on Bytewit →
  3. UpdateCointelegraph100%

    The vote is part of the DeFi United recovery effort after the Kelp DAO hack and subsequent freeze by Arbitrum Security Council.

    May 7, 2026, 3:14 PMRead on Bytewit →
Kelp DAO $292M Exploit | Bytewit Incidents