The trust assumption of the cross-chain bridge has been broken once again—fraudulent messages can unlock over 100 million in liquidity. This time, AAVE stopped the bleeding in time.

AAVE publishes the results of its post-incident investigation into the rseth incident: fake messages caused the Kelp LayerZero V2 cross-chain bridge to release 116,500 rseth when moving from Unichain to Ethereum, while the Unichain side was not destroyed. The attacker injected 8 AAVE V3 positions through third-party cross-chain infrastructure, borrowing out 82,650 WETH and 821 WSTETH, which impacted the market. Currently, rseth on Arbitrum has been destroyed, and the LayerZero OFT adapter has replenished 116,131.72 rseth in 5 batches; related assets and the market have been restored.