Massive $290 Million Hack Hits Ethereum and Arbitrum
News By Alex Dovbnya Sun, 19/04/2026 - 5:59 One of the largest decentralized finance (DeFi) exploits of 2026 took place on Saturday.. Advertisement
Advertisement
An attacker has siphoned over $290 million from the Kelp DAO ecosystem across the Ethereum and Arbitrum networks.
Lending protocols had to urgently enact emergency protective measures in order to be able to contain the financial contagion as a result of the breach, which centered on the rsETH cross-chain bridge.
The price of the Aave (AAVE) token has plunged by roughly 18% as a result of the devastating exploit.
HOT Stories Massive $290 Million Hack Hits Ethereum and Arbitrum Most Important Bitcoin (BTC) Price Test in 2026, Ethereum (ETH) Hits Ceiling, XRP Will Go Parabolic If Price Growth Accelerates: Crypto Market ReviewThe root cause
According to on-chain forensics provided by security analytics firm D2 Finance, the vulnerability was not a flaw within the underlying LayerZero infrastructure.
AdvertisementInstead, the exploit has been identified as an "OApp peer-trust bug," which stems from a severe key compromise on the source chain.
You Might Also Like
Thu, 03/12/2026 - 21:49
'Fat Fiinger' Nightmare? Crypto Trader Just Made $50 Million Mistake
ByAlex Dovbnya
The attacker managed to compromise a legitimately deployed Kelp DAO peer contract.
AdvertisementThe attacker’s initial addresses were funded via the cryptocurrency mixer Tornado Cash to obscure their tracks prior to the breach.
Leveraging stolen funds
After securing the massive trove of rsETH, the exploiter did not immediately attempt to cash out.
Instead, they moved to leverage the stolen assets across major DeFi lending markets.
Blockchain security firm PeckShield revealed that the attacker aggressively deposited the stolen rsETH as collateral to borrow Wrapped Ethereum (WETH).
The exploiter's consolidated holdings currently exceed 106,400 ETH, valued at nearly $250 million.
Emergency response
Aave officially announced the freezing of all rsETH markets across its V3 and V4 deployments, stripping the asset of all borrowing power. Aave founder Stani Kulechov was quick to reassure users that Aave's core smart contracts remain secure and were not exploited.
#Ethereum News #Arbitrum #Decentralized Finance Advertisement
