One Bridge Exploit Just Wiped $13 Billion From DeFi in Two Days
On Saturday at 17:35 UTC, an attacker drained 116,500 rsETH (roughly $292 million) from Kelp DAO's cross-chain bridge, making it the largest DeFi exploit of 2026. The attack targeted LayerZero's messaging infrastructure, which Kelp used to move its restaked ether token between more than 20 blockchains. The attacker compromised two of LayerZero's own verification servers, then DDoS'd the backups to force failover onto the poisoned nodes. The bridge believed a valid cross-chain instruction had arrived and released the tokens. LayerZero has preliminarily attributed the attack to North Korea's Lazarus Group.
What happened next was worse than the exploit itself. The attacker took the stolen rsETH, deposited it into Aave V3 as collateral, and borrowed roughly $196 million in wrapped ether against it. The collateral was stolen and effectively unbacked, but Aave's smart contracts treated it as legitimate. Aave's total value locked cratered from $26.4 billion to $17.9 billion in 48 hours as depositors fled. The AAVE token fell 16%. Across the broader DeFi ecosystem, TVL dropped $13.2 billion, from $99.5 billion to $86.3 billion, as SparkLend, Fluid, Euler, Lido, and Ethena all froze or paused products with rsETH exposure.
Now Kelp and LayerZero are pointing fingers at each other. LayerZero blames Kelp for running a single-verifier bridge configuration despite warnings to adopt multi-verifier redundancy. Kelp is firing back: the compromised verifier was LayerZero's own infrastructure, the single-verifier setup is LayerZero's default onboarding configuration, and 40% of protocols on LayerZero run the same setup. Security researcher @banteg confirmed that LayerZero's reference deployment code ships with single-source verification defaults. Chainlink's Zach Rynes accused LayerZero of "deflecting responsibility" for its own compromised infrastructure.
Aave initially said its "Umbrella" safety module would cover the deficit, then walked that back to "explore paths to offset." Stani Kulechov, Aave's founder, emphasized that Aave's own contracts were not compromised. But that's cold comfort for depositors. Aave accepted a liquid restaking token as collateral, and when the bridge backing that token got drained on a chain Aave doesn't control, the bad debt landed on Aave's balance sheet anyway. As Aave's latest update put it: rsETH and WETH remain frozen across affected markets while they "assess potential resolutions."
The lesson is one bitcoiners have been screaming for years. When you build layers of abstraction on top of layers of abstraction, restaked tokens on cross-chain bridges used as collateral in lending protocols, the blast radius of a single failure becomes unknowable until it detonates. Bitcoin has no bridges, no restaking layers, no liquid receipt tokens, no composable counterparty chains. That's not a limitation. As we've noted in conversations like our recent deep dive with John Arnold on stablecoins and public blockchains, the complexity of the DeFi stack is the risk. Bitcoin's simplicity is the feature.
|
