Attackers Drain $290M in rsETH from Kelp DAO Bridge on April 19

According to DefiLlama data, on April 19, attackers drained approximately 116,500 re-staked ETH (rsETH) from Kelp DAO's bridge, valued at $290-293 million. The incident contributed to the total of $634 million in crypto assets stolen by malicious actors in April 2026, the highest monthly total since February 2025.

LayerZero, the cross-chain protocol underlying the bridge, attributed the vulnerability to a single validation path dependency in Kelp DAO's 1-of-1 decentralized validator network configuration, creating a single point of failure.