DeFi & NFT

Story: Kelp DAO Hack Triggers Finger-Pointing Over $290 Million Crypto Loss

By Jean-Luc Maracon

1 / 15

Two Days of Radio Silence. Kelp DAO went quiet for two full days after the breach.

2 / 15

LayerZero's Default Settings Under Fire. LayerZero's catching heat for how it handles security.

3 / 15

Aave's Collateral Problem. Aave didn't cause the hack directly. But their setup made things worse.

4 / 15

Kelp DAO lost $290 million. Now everyone's blaming each other.

5 / 15

The hack hit Kelp DAO's rsETH token hard, and the fallout spread across $14 billion in DeFi infrastructure.

6 / 15

Kelp DAO went quiet for two full days after the breach. When they finally spoke up, the statement confirmed how the exploit worked but didn't say much about paying people back.

7 / 15

The company's silence frustrated a lot of people. Two days feels like forever when your money's gone and nobody's talking.

8 / 15

LayerZero's catching heat for how it handles security. The company lets individual projects set up their own security measures, which sounds reasonable until you look at the…

9 / 15

Taylor Monahan, a blockchain security expert who knows her stuff, pointed out that tons of projects just stick with LayerZero's default settings.

10 / 15

And LayerZero still hasn't fully disclosed the attack vector. That lack of transparency spooked several major crypto projects into hitting pause on their asset bridging.

11 / 15

The criticism comes down to this: LayerZero put the security burden on individual teams who might not have the expertise to configure things properly.

12 / 15

The platform accepted rsETH as collateral without really thinking through cross-chain risks. Their risk assessments focused on market risks and liquidity risks—the usual stuff.

13 / 15

Aave's facing backlash now for not catching that vulnerability. The integration of rsETH as collateral seemed fine on paper, but it created conditions that amplified the…

14 / 15

Arbitrum's security council managed to claw back 30,000 ETH from the hacker. That's $71 million worth of stolen funds, now sitting in Arbitrum's hands instead of the attacker's.

15 / 15

See also: Fake Cops Force Victim to Hand Over $1 Million in Bitcoin During Brazen Home Invasion

The Currency Analytics

Want the full story?