#KelpDAOBridgeHacked

The KelpDAO bridge hack marks a pivotal moment for DeFi, showing how vulnerabilities in core infrastructure can trigger widespread systemic risk. The roughly $290M exploit did not stem from a typical smart contract flaw, but from weaknesses in cross-chain message verification linked to LayerZero. By manipulating validation, the attacker minted a large amount of unbacked rsETH that appeared legitimate on-chain.
The real damage unfolded when these fake assets were used as collateral on lending platforms like Aave. This enabled the attacker to drain over $200M in real liquidity, placing immense stress on lending pools and forcing liquidity constraints. The ripple effects led to panic withdrawals and reduced confidence across interconnected protocols.
The incident underscores key structural risks: reliance on semi-centralized validation systems, the fragility of composability, and liquidity feedback loops. It highlights that while interoperability enhances efficiency, it also amplifies the scale and speed at which failures propagate across the DeFi ecosystem.