
An attacker exploited Kelp DAO's LayerZero-powered cross-chain bridge, draining 116,500 rsETH tokens worth approximately $292 million over the weekend. The exploit represented about 18% of rsETH's circulating supply. The attacker deceived the messaging layer into authorizing token release. Kelp's emergency systems paused contracts within 46 minutes of the successful drain.