KelpDao
Contents
KelpDao - Rekt
Nobody hacked KelpDAO. They hacked what KelpDAO trusted.
On April 18, 2026, an attacker fed false data to the single verifier standing between LayerZero's cross-chain bridge and 116,500 rsETH in user deposits, roughly 18% of the token's entire circulating supply.
Approximately $290 million gone.
The contract saw a valid signature. It did what valid signatures tell it to do. It released the funds.
What followed wasn't just a theft. It was a controlled detonation inside DeFi's most trusted lending infrastructure.
The stolen rsETH went straight into Aave as collateral, borrowed real WETH against itself, and was gone before the protocol's emergency multisig had assembled enough signatures to hit pause.
Aave's TVL shed $6.28 billion in under 48 hours.
WETH pools hit 100% utilization, trapping depositors who hadn't moved fast enough.
Nine protocols froze markets.
Arbitrum's Security Council used emergency powers to seize 30,766 ETH from the attacker's wallet on-chain, a move that drew as much debate as …
Nobody hacked KelpDAO. They hacked what KelpDAO trusted.
On April 18, 2026, an attacker fed false data to the single verifier standing between LayerZero's cross-chain bridge and 116,500 rsETH in user deposits, roughly 18% of the token's entire circulating supply.
Approximately $290 million gone.
The contract saw a valid signature. It did what valid signatures tell it to do. It released the funds.
What followed wasn't just a theft. It was a controlled detonation inside DeFi's most trusted lending infrastructure.
The stolen rsETH went straight into Aave as collateral, borrowed real WETH against itself, and was gone before the protocol's emergency multisig had assembled enough signatures to hit pause.
Aave's TVL shed $6.28 billion in under 48 hours.
WETH pools hit 100% utilization, trapping depositors who hadn't moved fast enough.
Nine protocols froze markets.
Arbitrum's Security Council used emergency powers to seize 30,766 ETH from the attacker's wallet on-chain, a move that drew as much debate as …
IoC
0000000000000000000000000000000000000DA0
cb2ee450d6e770216dc3061750b4ac5b5fa494666bcf7eaa936411733e2ef7ee
8B1b6c9A6DB1304000412dd21Ae6A70a82d60D3b
CBb24A6B4DAfaAA1a759A2F413eA0eB6AE1455CC
1ae232da212c45f35c1525f851e4c41d529bf18af862d9ce9fd40bf709db4222
3C5c2F4bCeC51a36494682f91Dbc6cA7c63B514C
3f4510d855cf3a805fec59daafae640d290749b7bf1e5450f91b5fb0018b3b4e
1F4C1c2e610f089D6914c4448E6F21Cb0db3adeF
589dedbd617e0cbcb916a9223f4d1300c294236b
5d3919F12bCc35c26Eee5F8226A9bee90c257Ccc
cb2ee450d6e770216dc3061750b4ac5b5fa494666bcf7eaa936411733e2ef7ee
8B1b6c9A6DB1304000412dd21Ae6A70a82d60D3b
CBb24A6B4DAfaAA1a759A2F413eA0eB6AE1455CC
1ae232da212c45f35c1525f851e4c41d529bf18af862d9ce9fd40bf709db4222
3C5c2F4bCeC51a36494682f91Dbc6cA7c63B514C
3f4510d855cf3a805fec59daafae640d290749b7bf1e5450f91b5fb0018b3b4e
1F4C1c2e610f089D6914c4448E6F21Cb0db3adeF
589dedbd617e0cbcb916a9223f4d1300c294236b
5d3919F12bCc35c26Eee5F8226A9bee90c257Ccc