unfolded.|4月 18, 2026 19:48
Kelp DAO rsETH bridge exploit: $292M drained.
Attacker called `lzReceive` on LayerZero EndpointV2 at 17:35 UTC, triggering the OFT bridge to release 116,500 rsETH. Wallet funded via Tornado Cash 10 hours earlier. Kelp’s emergency multisig paused core contracts 46 minutes later, blocking two follow-up attempts.
Key risks: Single-contract bridge vector in multi-chain liquid restaking; potential AAVE bad debt.
Alpha angle: This “backdoor call” reframes LayerZero OFT security as centralized point-of-failure, not trustless omnichain. Hidden signal: restaking protocols may now price in mandatory multi-bridge redundancy, boosting native bridge narratives over cross-chain hype.(unfolded.)
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink