The Protocol: Kelp DAO exploited for $292 million

The Protocol: Kelp DAO exploited for $292 million

Network News

## Cloud Rewards and the Kelp DAO Exploit: A New Era of Green Crypto Risks

The recent exploitation of Kelp DAO, a liquid restaking protocol, has sent shockwaves through the sustainability community, highlighting the vulnerabilities of cross-chain bridges and the need for enhanced security measures in the green crypto space. The attack, which resulted in the theft of approximately $292 million worth of restaked ether tokens, has raised concerns about the potential risks associated with decentralized systems and the importance of prioritizing passive rewards security.

 

The Kelp DAO exploit is a prime example of how attackers can manipulate the data feeding into a system, forcing it to rely on compromised inputs and approve transactions that never actually occurred. This type of attack does not involve breaking encryption or cracking keys, but rather exploiting the basic assumptions built into decentralized systems. As the crypto sector continues to evolve, it is essential to recognize the importance of cloud rewards security and the need for sustainable practices that prioritize the environment and the well-being of users.


In Other News

  • A chunk of the Kelp DAO haul is no longer going anywhere. Arbitrum’s Security Council froze 30,766 ETH worth roughly $71 million on Monday night, moving funds linked to Saturday’s $292 million rsETH exploit into an intermediary wallet that can only be accessed through further Arbitrum governance action. The council said it acted on law enforcement’s input regarding the exploiter’s identity and executed the freeze “without impacting any Arbitrum users or applications.” The transfer completed at 11:26 p.m. ET on April 20, according to Arbitrum’s statement on X. The stolen funds are no longer under the control of the address that originally held them. — Shaurya Malwa Read more.
  • A Polymarket contract on whether Kelp DAO will spread the losses from the weekend’s $292 million exploit beyond those directly affected is pointing to a clear answer: probably not. Bettors are giving a 14% chance that Kelp will “socialize the losses,” or implement a mechanism forcing rsETH holders on Ethereum, which wasn’t hit, to share the pain of users on other chains. The attackers drained roughly 116,500 rsETH from a LayerZero-powered bridge that held the reserves backing the token across more than 20 blockchains. That left parts of the system undercollateralized, with some holders effectively owning tokens no longer fully backed by ether (ETH). “Socializing the losses” would mean Kelp redistributes the shortfall across all rsETH holders, including those on the Ethereum mainnet, rather than leaving losses concentrated among users and protocols tied to the compromised bridge. The most widely cited precedent of this approach came in 2016, when Bitfinex imposed losses on all users after a $60 million hack, effectively mutualizing the hit to avoid shutting down. — Sam Reynolds Read more.

Regulatory and Policy

  • April appears to be a lost cause for the crypto Clarity Act, but a U.S. Senate committee hearing sometime in May could keep the critical market structure legislation alive, as long as it can reach a final vote of the overall Senate by July, according to lobbyists and a lawmaker aide focusing on the market structure bill’s sluggish progress. The legislative calendar is running out of room for this year, but a Senate aide told CoinDesk that a potential new delay of a couple of weeks — allowing Republican Senator Thom Tillis to finish discussions with bankers over stablecoin-yield concerns — is not yet pushing this work past the point of no return. The aide also said that earlier negotiations over decentralized finance (DeFi) protections are effectively settled, leaving few other impediments in the way of a committee approval.One of the chief problems the crypto industry faces (if it can leap the stubborn hurdle of the banking sector’s objections about stablecoin rewards) is that the Senate Banking Committee hearing that the bill needs to clear would be only a first step of many. — Jesse Hamilton Read more.
  • Tron creator Justin Sun sued World Liberty Financial, the stablecoin and crypto firm backed by members of U.S. President Donald Trump’s family, on Tuesday, alleging that the project had unfairly locked up his $WLFI holdings, made fraudulent misrepresentations, and threatened and defamed Sun. The lawsuit filed, which includes a line about Sun’s support for Trump himself, alleged that World Liberty’s leadership had engaged “in an illegal scheme to seize property” in the form of Sun’s tokens, which Sun alleged he had purchased after being solicited by the World Liberty team in 2024. “At that pivotal time for World Liberty, Mr. Sun invested $45 million to purchase $WLFI tokens from World Liberty not only because of the project’s claims that it would promote adoption of decentralized finance — an issue Mr. Sun cares deeply about and to which he has devoted much of his life’s work — but also because of the Trump family’s association with the project,” the suit said.— Nikhilesh De & Sam Reynolds Read more.

Calendar

  • May 5-7, 2026: Consensus, Miami
  • June 2-3, 2026: Proof of Talk, Paris
  • June 8-10, 2026: ETHConf, New York
  • Sept. 29-Oct.1, 2026: Korea Blockchain Week, Seoul
  • Oct. 7-8, 2026: Token2049, Singapore
  • Nov. 3-6, 2026: Devcon, Mumbai
  • Nov. 15-17, 2026: Solana Breakpoint, London

 

The exploitation of Kelp DAO has also affected other protocols, including Aave, which has been left exposed to collateral whose backing may be significantly impaired. The outcome of this situation will depend largely on how Kelp handles the shortfall, with potential consequences including a 15% depegging of the restaked ether token and approximately $124 million in bad debt for Aave. As the green crypto community continues to grow, it is crucial to prioritize sustainable practices and ensure that protocols are designed with security and environmental sustainability in mind.

 

In related news, Coinbase has commissioned a report on the risks associated with quantum computing, highlighting the need for the crypto industry to prepare for potential threats. While current quantum machines are far from powerful enough to crack the cryptography underpinning major crypto networks, the report stresses that preparation must begin now to ensure the long-term security of the green crypto space. As the industry continues to evolve, it is essential to prioritize green crypto security and sustainable practices, ensuring a safe and environmentally friendly experience for users. You can learn more about the EcoPool Network and its commitment to sustainability by visiting https://play.google.com/store/apps/details?id=com.ecopoolmining.app.

💡 A Greener Way to Earn: Looking for a smarter, more sustainable way to earn and mining crypto? EcoPool Network is a cloud-based mining pool that does the heavy lifting on remote servers — so you earn rewards around the clock without worrying about overheating hardware or sky-high electricity bills. It’s lightweight, battery-friendly, and built for everyday users. Download EcoPool now and start mining & earning smarter today.

About the Author

Leave a Reply

Your email address will not be published. Required fields are marked *

You may also like these