Kelp DAO $293M Drain Strands rsETH Across Chains
An attacker drained approximately $293 million in rsETH from Kelp DAO’s LayerZero-powered cross-chain bridge on April 18, 2026, impacting 18% of the token’s total supply and leaving wrapped rsETH stranded on multiple chains.[1][2][3] Kelp DAO paused all rsETH contracts in response, blocking a further $100 million attempt.[2]
Overview
- Drain Scale: 116,500 rsETH (~$293M) extracted via LayerZero’s EndpointV2 lzReceive function; represents 18% of rsETH total supply.[1][2]
- Attack Timeline: Occurred Saturday, April 18, 2026; main transaction 0x1ae232da212c45f35c1525f851e4c41d529bf18af862d9ce9fd40bf709db4222.[2]
- Mitigation Action: Kelp paused rsETH contracts, preventing additional $100M loss (total potential $391M).[2]
- Affected Protocols: Aave V3/V4 froze rsETH markets (~$177M bad debt); Compound confirmed exposure; ~$280M+ bad debt across lending markets.[2]
- Token Impact: AAVE token dropped 19% in 3 days; ETH -2.60%.[2]
- User Warning: Holders of rsETH on L2s should verify wrapped versions; aWETH stakers in Aave Umbrella face possible slashing.[2]
Subscribe to our Social Media for Exclusive Crypto News and Insights 24/7!
Kelp DAO $293M Drain: Attack Mechanics
The exploit hit Kelp DAO’s rsETH bridge, built on LayerZero for cross-chain transfers.[1][2][3] Attacker drained 116,500 rsETH in minutes through the lzReceive function on EndpointV2.[2] Kelp’s quick pause on all rsETH contracts stopped a second wave targeting another $100 million.[2]
This stands as the biggest DeFi exploit of 2026 so far.[2] No evidence points to Aave contracts being directly hacked-issue traces to rsETH backing.[2] Protocols like Aave and Compound now grapple with bad debt from unbacked rsETH.[2]
Primary sources confirm the drain tx hash, but on-chain verification from explorers like Etherscan shows funds routed post-drain (tx: 0x1ae232…).[2] Techmeme aggregated reports from CoinDesk and CoinGape, noting the Saturday timing.[1][3]
Protocols Facing Bad Debt from Kelp DAO Drain
Aave V3 and V4 froze rsETH markets immediately, citing ~$177 million in bad debt.[2] Compound acknowledged exposure without specifying amounts.[2] Total bad debt exceeds $280 million across Ethereum DeFi lending markets.[2]
| Protocol | Action Taken | Estimated Bad Debt | Market Status |
|---|---|---|---|
| Aave V3/V4 | Froze rsETH markets | ~$177M | Frozen[2] |
| Compound | Confirmed exposure | Not specified | Active monitoring[2] |
| Others | ~$280M+ total | Varies | Impacted lending[2] |
AAVE token fell 17.49% amid the news, with ETH down 2.60%.[2] Users holding wrapped rsETH on L2s risk unbacked positions.[2]
rsETH Supply Stranded Post Kelp DAO $293M Drain
The drain pulled 18% of rsETH supply, stranding wrapped versions across 20+ chains via LayerZero bridge.[1][2] Binance Square analysis flags risks for staked aWETH in Aave’s Umbrella network, potential slashing ahead.[2]
No direct Glassnode or Arkham data in reports, but custom metric from supply stats: drained rsETH equals 116,500 / total supply pre-drain (~647,222 rsETH implied at 18%).[2] Holders on non-Ethereum chains face redemption blocks due to paused contracts.[2]
| rsETH Metric | Pre-Drain | Post-Drain | % Change |
|---|---|---|---|
| Total Supply | ~647k | ~530k | -18%[2] |
| Drained Amount | N/A | 116,500 | N/A |
| Potential Extra Loss | N/A | $100M blocked | N/A |
Long-term, rsETH restaking yield could drop if bad debt forces liquidations-baseline 12-36 months sees supply recovery only if Kelp reimburses via insurance or treasury (unconfirmed).[2]
On-Chain Flows After Kelp DAO $293M Drain
Post-drain, attacker funds show no immediate exchange inflows per available tx data-main drain tx lacks secondary traces in reports.[2] Kelp’s pause limits further outflows, but stranded rsETH on 20 chains creates liquidity silos.[1][2]
Custom metric: Bad debt-to-supply ratio = $280M / ~$1.62B pre-drain rsETH MCAP (~17% of TVL exposed).[2] No Nansen wallet clustering here, but 18% supply hit suggests concentrated bridge risk.
Exchange flows absent; no inflows to Binance/Bitget noted, unlike RAVE squeeze case.[1] AAVE’s 19% drop reflects lending exposure, not direct rsETH holdings.[2]
Over 12-36 months, if protocols absorb bad debt via governance (Aave precedent), rsETH TVL rebounds baseline; upside if LayerZero patches bridge-downside slashing cascades to ETH collateral.[2]
Cross-Chain Impact of Kelp DAO $293M Drain
LayerZero bridge flaw enabled the rsETH pull from multiple chains, stranding wrapped tokens.[1][3] Reports confirm 20 chains affected indirectly via rsETH wrappers.[2] Kelp restaking platform halted ops 15 hours post-event.[4]
| Chain Type | rsETH Status | Stranded Amount Est. | Recovery Path |
|---|---|---|---|
| Ethereum L1 | Paused contracts | Core drain origin | Governance vote[2] |
| L2s (20+) | Wrapped unbacked | Distributed | Bridge fix needed[2] |
| Lending (Aave/Comp) | Markets frozen | ~$280M debt | Insurance claims[2] |
Santiment-style holder data missing; supply-in-profit % irrelevant pre-drop. Long-term (24 months), cross-chain bridges face higher scrutiny-LayerZero V2 endpoint directly implicated.[2]
Risks and Uncertainties in Kelp DAO Drain Fallout
Downside scenario: If bad debt exceeds $280M due to unreported exposures, Aave governance faces slashing votes, amplifying ETH liquidations.[2] Uncertainty factor: Exact stranded rsETH per chain unquantified; sources vary on total chains (20+ reported, no on-chain breakdown).[1][2]
Projections limited-baseline 12-month recovery assumes insurance payout; upside catalysts like Kelp treasury unconfirmed.[2] No primary Kelp announcement in results; relies on aggregator reports.[1][3] Data gaps on attacker wallet clusters (Nansen/Arkham absent).
Conflicting figures minor: $292M vs $293M.[1][2][3] Projections unreliable without filings.
Market Reactions to Kelp DAO $293M Drain
AAVE plunged 19% in 3 days, ETH -2.60%, signaling DeFi contagion.[2] Binance/Bitget probes unrelated RAVE pump, but rsETH event dwarfs it.[1] Techmeme ride-along coverage from CoinDesk/CoinGape confirms pause efficacy.[3]
Custom metric: Exploit size vs 2026 DeFi TVL (~$200B implied), rsETH hit = 0.15% sector-wide-contained but bridge precedent.[2] Holder behavior: Restakers check wrappers; no mass exodus data.
Long-term 36-month view: Repeated bridge exploits (LayerZero pattern) erode cross-chain TVL growth from 2025 highs-baseline stagnation if unpatched.[2]
Stranded rsETH across chains highlights bridge centralization risk, with 18% supply loss underscoring pause dependency for containment.[2]
