Theblock.Co DeFi Exploit Triggers $300M Recovery Efforts Amid Major Protocol Fallout
Article Content
- •A $292 million exploit on KelpDAO's rsETH token caused severe liquidity issues in DeFi.
- •DeFi United has raised over $300 million to support recovery efforts, with major contributions from Consensys.
- •Aave experienced over $12 billion in outflows, highlighting the exploit's significant impact on the DeFi ecosystem.
On April 18, 2026, a $292 million exploit targeted KelpDAO's rsETH token, exploiting a vulnerability in its LayerZero bridge configuration. Attackers redeemed unbacked rsETH tokens on Ethereum and used them as collateral on major DeFi platforms like Aave, leading to significant liquidity issues. In response, the DeFi United initiative has raised over $300 million to support recovery efforts, with contributions from notable entities including Consensys and Joseph Lubin. Aave has experienced over $12 billion in outflows, and total value locked in DeFi has dropped from $110 billion to $82 billion. The exploit has raised concerns about the stability of decentralized finance and the interconnectedness of blockchain ecosystems. Solana's intervention by deploying treasury funds into Aave marks a significant cross-chain collaboration to restore confidence in the DeFi sector. The recovery efforts aim to normalize market conditions and restore backing for rsETH.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Kelp and DeFi United in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
NEAR Intents Loses $3.8 Million in Exploit Linked to Omni Bridge Bug On October 1, 2026, NEAR Intents, a cross-chain swap service, suffered a security breach resulting in the theft of approximately $3.8 million. The exploit was due to a bug in the interaction between its Omni deposit and withdrawal infrastructure and the NEAR Intents smart contract. Following the incident, NEAR Intents…
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…