Hackers Target DeFi Protocol Kelp DAO
Hackers target DeFi protocol Kelp DAO in a massive exploit, with nearly $300 million drained from the protocol's rsETH Adapter.
DeFi Security Breach
A total of $293.7 million was drained from the protocol's rsETH Adapter, a tool allowing users to deposit liquid staking tokens and get rsETH in return.
Impact on Aave and rsETH
Both Aave V3 and V4 have frozen rsETH markets, with Aave's contracts not exploited. The asset does not have any borrowing power due to the KelpDAO bridge exploit.
Exploit Details
Security firm Cyvers confirmed the hack, stating the funds had been swapped back to Ethereum and Arbitrum, with the attacker linked to coin-mixer Tornado Cash's funding.
DeFi Protocol Vulnerabilities
DeFi protocol vulnerabilities are a growing concern, with cross-chain activity and smart contract exploits being common attack vectors. Kelp DAO has paused rsETH contracts while investigating the situation with security experts.
Key Takeaways
- Hackers drained nearly $300 million from Kelp DAO's rsETH Adapter.
- Aave V3 and V4 have frozen rsETH markets due to the exploit.
- The attacker was linked to coin-mixer Tornado Cash's funding.
- DeFi protocol vulnerabilities are a growing concern, with cross-chain activity and smart contract exploits being common attack vectors.
Frequently Asked Questions
What is the impact of the Kelp DAO exploit on Aave?
Aave's contracts have not been exploited, but rsETH markets have been frozen on Aave V3 and V4.
How much was drained from Kelp DAO's rsETH Adapter?
A total of $293.7 million was drained from the protocol's rsETH Adapter.
