AAVE publishes an rseth incident investigation report; some of the attacker’s assets have been destroyed

robot
Abstract generation in progress
CoinWorld News reports that Wu said that AAVE has released a post-incident investigation into the April 18th rseth event, stating that the liquidity staking protocol Kelp's rseth LayerZero V2 cross-chain bridge accepted forged messages during the cross-chain process from Unichain to Ethereum, resulting in the release of 116,500 rseth on the Ethereum side, while no corresponding burn occurred on the Unichain side. AAVE stated that the attack occurred on third-party cross-chain bridge infrastructure, with the attacker depositing stolen rseth into 8 AAVE V3 positions and borrowing out 82,650 WETH and 821 WSTETH, affecting the AAVE market. Currently, the attacker’s rseth on Arbitrum has been burned, and the LayerZero OFT adapter has replenished 116,131.72 rseth in 5 batches. The rseth assets are fully restored, and the affected WETH and rseth markets have returned to normal.
AAVE-0.08%
ZRO2.38%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 10
  • 2
  • Share
Comment
Add a comment
Add a comment
QuantizedDaydream
· 8h ago
The cross-chain bridge is really risky, LayerZero took the blame this time.
View OriginalReply0
GateUser-c1cab702
· 8h ago
Injecting positions through third-party infrastructure—this attack path is convoluted enough; we need to carefully review and replay it.
View OriginalReply0
GotLiquidatedAgainLastNight.
· 8h ago
Kelp gets caught in the crossfire, LayerZero V2 just launched and already had issues
View OriginalReply0
GateUser-818d3026
· 9h ago
The cross-chain risk of this LST type, rseth, was previously underestimated, and now it has been fully exposed.
View OriginalReply0
SlippageSkeptic
· 9h ago
5 batches of 110k coins replenished, the project's backing speed is acceptable, but user confidence is hard to restore.
View OriginalReply0
MistBlueLily
· 9h ago
AAVE's post-incident investigation was released quite quickly; transparency is a good thing, but what about pre-incident risk control?
View OriginalReply0
Post-RainCancellationAgent
· 9h ago
116,500 rseth tokens appeared out of thin air—if it hadn’t been discovered in time, it could have triggered a DeFi earthquake.
View OriginalReply0
MistValleyFront
· 9h ago
The attack cost is actually not low; if it can work, it means the entire cross-chain stack has weak points.
View OriginalReply0
SentimentIndicatorCollecting
· 9h ago
Unichain’s new chain has taken a major hit, and the security of the Base ecosystem is now questionable.
View OriginalReply0
RugproofRookie
· 9h ago
WSTETH is also borrowed; if stETH loses its peg, the chain reaction could be even more terrifying.
View OriginalReply0
View More
  • Pinned