Just caught up on the Kelp DAO situation and wow, this is worse than the initial headlines made it sound. Some attacker drained 116,500 rsETH from their cross-chain bridge on Saturday - that's about $292 million gone. The thing that's getting to everyone is that this crypto DAO had basically all their wrapped token reserves sitting in one place across like 20 different networks. Now all those L2 versions of rsETH are backed by... nothing, essentially.

What blew my mind is how fast this cascaded through DeFi. Within hours Aave froze rsETH markets, SparkLend did the same, and even Lido paused deposits on products with rsETH exposure. AAVE token tanked around 10% as people started worrying about bad debt. The attacker apparently tricked LayerZero's cross-chain messaging into thinking a valid instruction came through, which released the funds to an attacker wallet. Kelp's emergency pause came 46 minutes later but by then the damage was done.

This is officially the biggest DeFi hack of 2026 - bigger than the Drift exploit from last month. The real problem now is that people holding wrapped rsETH on other chains are probably gonna panic redeem, which puts pressure on the actual Ethereum supply. If too many try to exit at once, the whole structure could unwind. The crypto DAO space is already dealing with Tornado Cash complications since the stolen funds are starting to move through mixers. Weekend's gonna be rough for anyone exposed to this. Watching to see if Kelp can recover anything or if this just becomes another cautionary tale about cross-chain risks.