ETH Daily

Aave disabled rsETH, WETH, and borrowing on all LST and LRT collateral types after the KelpDAO exploit, sending markets to 100% utilization.

KelpDAO, a liquid restaking protocol, suffered a $290 million exploit involving its LayerZero-powered cross-chain bridge. On April 18, 2026, at approximately 17:35 UTC, an attacker was able to release 116,500 rsETH from the bridge contract on Ethereum mainnet without a corresponding burn event on a Layer 2. The amount represents roughly 18% of the rsETH circulating supply. The attacker exploited a single point of failure in KelpDAO's 1-of-1 Decentralized Verifier Network (DVN) configuration, ...