Kelp restaking platform exploited for $293M, affecting nine crypto protocols
Crypto Briefing·60-word summary·1 min read
The Kelp restaking platform was exploited for $293 million on April 18, 2026, impacting nine crypto protocols. The attack exposes systemic vulnerabilities in DeFi, raising concerns over security and trust within interconnected blockchain ecosystems. The incident underscores the need for enhanced security measures in decentralized finance platforms to prevent large-scale exploits.
The KelpDAO exploit on April 19, 2026, caused the AAVE ETH pool to reach high utilization, exposing systemic risks in DeFi. The incident raises concerns about liquidity and price stability in Ethereum's broader markets, highlighting vulnerabilities within decentralized finance protocols. The exploit underscores the ongoing security challenges facing DeFi platforms.
The KelpDAO exploit has created a $236 million bad debt risk for AAVE, a major DeFi lending platform. The incident has heightened market volatility and investor concern, contributing to a 3% drop in Ethereum's price on April 19, 2026. The exploit underscores ongoing security vulnerabilities within DeFi protocols and their potential to impact broader crypto markets.
Iran is prioritizing ships that pay security fees in the Strait of Hormuz, a strategic waterway, potentially affecting global shipping costs and international relations. This move could strain diplomatic ties and test enforcement capabilities in the region, which is critical for global trade. The decision highlights ongoing security concerns in the vital maritime corridor.
On April 18, 2025, KelpDAO and Aave suffered a $292 million exploit involving the rsETH liquid restaking token. The attacker exploited a cross-chain vulnerability to mint approximately $280-300 million worth of rsETH on EigenLayer, then used these tokens as collateral on Aave V3 to borrow ETH and WETH. The incident caused Aave’s token to drop by 10%.
On April 15, 2026, Kelp DAO's rsETH bridge was exploited, draining $292 million and 116,500 rsETH tokens. The attack, the largest DeFi hack of 2026, involved manipulating LayerZero’s cross-chain messaging to approve fraudulent transactions. This breach surpassed the previous $285 million Drift protocol attack, which was linked to North Korean actors.
The UN chief condemned the attack that killed a French peacekeeper in Lebanon, raising concerns about the ceasefire's stability and regional security. The incident, which occurred in April 2026, has heightened tensions and may influence market perceptions of peace prospects in the region. The attack underscores ongoing security challenges in Lebanon amid fragile peace efforts.