Channels

Drift

DeFi

Security

Tornado

<p>Kelp, a liquid restaking platform, reported a cyber attack on Saturday that affected its rsETH token operations.&nbsp;</p>
<div id="cn-block-summary-block_ac65ecbd7b753f47b077e2ffa03ed646" class="cn-block-summary">
 <div class="cn-block-summary__nav tabs"><span>Summary</span>
 </div>
 <div class="cn-block-summary__content">
  <ul>
   <li>Kelp exploit targeted rsETH bridge contract, leading to $293 million loss within a short period.</li>
   <li>Stolen funds moved through Tornado Cash, with large portion converted into Ether across networks.</li>
   <li>DeFi platforms froze rsETH activity after contagion risk spread across at least nine connected protocols.</li>
  </ul>
 </div>
</div>
<p>The team detected unusual cross-chain activity and quickly paused smart contracts across the main network and several Layer-2 systems. The platform <a href="https://x.com/KelpDAO/status/2045595819035046148" rel="noopener noreferrer nofollow">stated </a>that it “investigates” the issue while assessing the full scope of the breach.</p>
<p>Meanwhile, the exploit focused on the rsETH adapter bridge contract. This component manages token transfers across chains.&nbsp;</p>
<p>You might also like: <a href="https://crypto.news/ravedao-responds-after-rave-token-surge-and-80-crash/" rel="noopener noreferrer nofollow"> RaveDAO responds after RAVE token surge and 80% crash </a></p>
<p>Blockchain security firm Cyvers <a href="https://x.com/CyversAlerts/status/2045596550882001142" rel="noopener noreferrer nofollow">estimated </a>losses at around $293 million. The attacker gained access to funds by targeting this contract, leading to a large outflow within a short time.</p>
<h1 class="wp-block-heading" id="strong-stolen-funds-moved-through-crypto-channels-strong"><strong>Stolen Funds Moved Through Crypto Channels</strong></h1>
<p>Cyvers reported that the attacker used an address funded through Tornado Cash. This tool is often used to obscure transaction trails. A large portion of the stolen funds, about $250 million, has already been converted into Ether.</p>
<p>The movement of funds has raised concerns among platforms connected to rsETH. Monitoring teams continue to track the assets as they move across networks. No recovery of funds has been confirmed so far. Kelp has not released further technical details about the breach at this stage.</p>
<p>Moreover, the attack caused what Cyvers described as “cross-protocol contagion.” At least nine crypto platforms had exposure to rsETH and took action to limit risk. Many of them paused or restricted activity involving the token.</p>
<p>Aave <a href="https://x.com/aave/status/2045593585966252377" rel="noopener noreferrer nofollow">confirmed </a>that it froze rsETH markets on its V3 and V4 platforms. This step aimed to prevent further losses and contain risk. Cyvers CEO Deddy Lavid stated that the event “highlights the risks of composability in DeFi,” referring to how connected systems can spread risk quickly.</p>
<h2 class="wp-block-heading" id="strong-rising-security-concerns-in-crypto-sector-strong"><strong>Rising Security Concerns in Crypto Sector</strong></h2>
<p>The Kelp incident adds to a growing list of crypto platform breaches. Data shows that <a href="https://crypto.news/crypto-hacks-drained-1-5b-from-industry-in-2024-and-2025-26-is-already-worse/" rel="noopener noreferrer nofollow">losses </a>from hacks and scams reached about $482 million in the first quarter of 2026. These events continue to affect user confidence and platform operations.</p>
<p>Another recent case<a href="https://crypto.news/circle-calls-for-circuit-breakers-after-270m-drift-protocol-defi-hack/" rel="noopener noreferrer nofollow">involved Drift Protocol</a>, which lost about $280 million in an exploit. The platform reported that attackers spent months gaining access before deploying malware. These incidents show ongoing challenges in securing decentralized finance systems.</p>
<p>Read more: <a href="https://crypto.news/us-crypto-exchange-2026-andx-launches-on-bitgo/" rel="noopener noreferrer nofollow"> AndX Enters US Crypto Exchange 2026 Market Using BitGo’s Regulated Infrastructure </a></p>

Kelp attack spreads risk across DeFi, $293M lost

Table of Contents

crypto.news

Other articles published on Apr 19, 2026

Join our free newsletter for daily crypto updates!