Kelp Exploit: DeFi United Rallies to Restore $292M rsETH Backing

Summary

• Kelp DAO suffered a $292 million exploit on April 18, 2026, losing 18% of its rsETH supply via a LayerZero bridge hack.
• DeFi protocols under the 'DeFi United' initiative, led by Aave, are pledging over 43,500 ETH to restore rsETH backing.
• This crisis highlights both DeFi's vulnerabilities and its collaborative strength in addressing systemic risks.

On April 18, 2026, attackers hit Kelp DAO, a major player in Ethereum restaking, with the year's biggest DeFi exploit. They drained $292 million in rsETH, about 18% of the circulating supply, through a flaw in Kelp's LayerZero bridge. This breach shook Kelp's core and rippled through the entire DeFi world.

Attackers funneled the stolen funds into platforms like Aave and amplified risks for other DeFi protocols.

"The Kelp DAO exploit is a stark reminder of how interconnected DeFi has become, where a single breach can threaten multiple platforms."

, Anonymous Analyst (CoinDesk)

Context: DeFi's Persistent Security Challenges

Decentralized finance offers innovation but exposes users to big risks. Cross-chain bridges like Kelp DAO's LayerZero setup are prime targets because they're complex and handle huge value. The Kelp exploit in April 2026 ramps up worries in a year full of security issues.

This isn't just one event. It's part of a larger pattern of DeFi flaws. The rapid spread to lending platforms shows how one breach can upset the whole system.

Details: Unpacking the Kelp Exploit and DeFi United's Response

The Kelp DAO hack happened on April 18, 2026, when attackers exploited a LayerZero bridge flaw and grabbed 116,500 rsETH worth $292 million. That figure is 18% of the token's supply, as sources like CoinDesk and Rare Evo confirm. The stolen assets went straight to lending platforms including Aave and sparked immediate concerns about liquidity.

A group of protocols, such as Aave, ether.fi, Lido DAO, and Ethena, formed DeFi United to handle the mess. They're pledging over 43,500 ETH to fix rsETH backing and steady the ecosystems, per BSCNews and AMBCrypto. This move aims to restore trust and stop more damage.

The details of fund recovery are still in talks. It's a sign of rare unity in a fragmented field. Teams are now focused on protecting user money and strengthening Ethereum restaking setups.

Reaction: Community and Market Concerns

The DeFi community feels alarmed yet hopeful about the Kelp exploit and the recovery push. It's the biggest hack of 2026, so it's fueling talks about bridge security and restaking risks. Everyone's watching to see if DeFi United can avoid a chain reaction.

Markets are volatile with rsETH and other assets taking hits. The stolen funds on Aave raise fears of liquidity problems, though the ETH pledge brings some hope.

The DeFi world is at a turning point after the Kelp DAO exploit. If DeFi United succeeds, it could rebuild faith in restaking and cross-chain tech for the long haul. People should track the latest on fixes and bridge security upgrades.