Key Takeaways
- • $292M exploit on KelpDAO's LayerZero bridge occurred on April 18, 2026, when an attacker minted 116,500 unbacked rsETH tokens (approximately 18% of circulating supply) through a forged lzReceive call, extracting ~$236M in WETH from Aave within one hour.
- • Single-signer DVN (Delegated Validator Network) created catastrophic failure mode: LayerZero's 1-of-1 validator configuration on KelpDAO's bridge allowed a single forged signature to instruct the mainnet escrow to release tokens without proper authorization, exposing a critical architectural vulnerability affecting 47% of LayerZero-dependent applications.
- • Attacker exploited LayerZero infrastructure weakness: The perpetrator gained access to LayerZero's external RPC endpoint, forced the 1/1 DVN to failover to a malicious RPC, and executed cross-chain transactions to Avalanche and Arbitrum to obscure the origin before the main extraction.
- • KelpDAO's core restaking protocol remained uncompromised: The EigenLayer delegations and legitimate user deposits backing rsETH stayed intact; the breach was isolated to the bridge infrastructure, not the underlying liquid restaking token mechanics.
- • Market contagion triggered across DeFi: The exploit created immediate liquidity pressure on Aave, ZRO (LayerZero's token) declined 12.7%, and exposed systemic risks in cross-chain composability dependencies across major lending markets and yield platforms.
Summary
On April 18, 2026, at 17:35 UTC, a sophisticated exploit of KelpDAO's LayerZero bridge resulted in the minting of 116,500 unbacked rsETH tokens worth approximately $292 million—marking one of 2026's largest single DeFi extractions. The attacker leveraged a critical vulnerability in LayerZero's validator architecture to forge a signature that instructed KelpDAO's mainnet escrow to release tokens without legitimate backing. Within minutes, the fraudulent rsETH was deposited as collateral on Aave, where the attacker borrowed approximately $236 million in WETH against the fabricated collateral, completing the extraction within one hour.
The technical failure centered on KelpDAO's use of a one-of-one Delegated Validator Network (DVN) on LayerZero's bridge—a single-signer configuration that created an unacceptable point of failure. The attacker gained control of LayerZero's external RPC endpoint and executed a distributed denial-of-service attack, forcing the 1/1 DVN to failover to a malicious RPC that validated the forged lzReceive call. This architectural flaw was not unique to KelpDAO; analysts indicate that approximately 47% of applications built on LayerZero face similar risk exposure through comparable validator setups.
KelpDAO itself is a liquid restaking token protocol built on EigenLayer, with rsETH functioning as a claim on restaked ETH and accrued yield from delegated validators. By April 2026, rsETH had achieved over $1 billion in total value locked and had become integrated as collateral across major DeFi lending markets and yield platforms. The critical distinction is that the exploit did not compromise the restaking contracts or the EigenLayer delegations—the core protocol remained functional and user deposits stayed intact. The breach was strictly a bridge infrastructure failure.
The contagion effects reverberated immediately through interconnected DeFi markets. Aave faced acute liquidity pressure from the sudden influx of fraudulent collateral claims and mass liquidation cascades. LayerZero's native token (ZRO) declined 12.7% in the hours following disclosure. The incident exposed systemic risks in cross-chain token composability, where a single architectural weakness in one protocol's bridge could trigger losses and market stress across multiple platforms. Both KelpDAO and LayerZero committed to publishing full post-mortems, with final assessments on bad debt, user compensation mechanisms, and potential token supply migrations expected to emerge in subsequent days.
The technical failure centered on KelpDAO's use of a one-of-one Delegated Validator Network (DVN) on LayerZero's bridge—a single-signer configuration that created an unacceptable point of failure. The attacker gained control of LayerZero's external RPC endpoint and executed a distributed denial-of-service attack, forcing the 1/1 DVN to failover to a malicious RPC that validated the forged lzReceive call. This architectural flaw was not unique to KelpDAO; analysts indicate that approximately 47% of applications built on LayerZero face similar risk exposure through comparable validator setups.
KelpDAO itself is a liquid restaking token protocol built on EigenLayer, with rsETH functioning as a claim on restaked ETH and accrued yield from delegated validators. By April 2026, rsETH had achieved over $1 billion in total value locked and had become integrated as collateral across major DeFi lending markets and yield platforms. The critical distinction is that the exploit did not compromise the restaking contracts or the EigenLayer delegations—the core protocol remained functional and user deposits stayed intact. The breach was strictly a bridge infrastructure failure.
The contagion effects reverberated immediately through interconnected DeFi markets. Aave faced acute liquidity pressure from the sudden influx of fraudulent collateral claims and mass liquidation cascades. LayerZero's native token (ZRO) declined 12.7% in the hours following disclosure. The incident exposed systemic risks in cross-chain token composability, where a single architectural weakness in one protocol's bridge could trigger losses and market stress across multiple platforms. Both KelpDAO and LayerZero committed to publishing full post-mortems, with final assessments on bad debt, user compensation mechanisms, and potential token supply migrations expected to emerge in subsequent days.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.