Kelp DAO Blames LayerZero for $292 Million Crypto Hack as It Moves to Chainlink
06 May 2026 · 07:06 UTC · CoinCentral RSS Feed · Original source
Read original at CoinCentral RSS Feed →
Summary
Kelp DAO announced a major security breach resulting in a $292 million loss on April 18, 2026. Attackers exploited vulnerabilities in Kelp's LayerZero-powered bridge to steal 116,500 rsETH tokens. The stolen tokens were then used as collateral on Aave v3 to borrow wrapped Ether. In dispute resolution, Kelp claims LayerZero approved the single-verifier setup that enabled the exploit. LayerZero disputes this attribution, stating that Kelp manually downgraded from a multi-DVN (Decentralized Verifier Network) configuration to a single-verifier setup against LayerZero's recommendations. The incident highlights critical vulnerabilities in cross-chain bridge architecture and governance. In response to the breach, Kelp DAO is migrating its infrastructure to Chainlink, signaling reduced confidence in LayerZero's security model and broader ecosystem concerns about bridge reliability.
Why it matters
Although the hack occurred April 18 and markets have had 18 days to digest initial impacts, the published blame dispute and strategic pivot keep the story in circulation. Near-term (minute/hour) impacts are minimal because price discovery has largely completed. Medium-term (daily/weekly) impacts emerge from accumulated concerns: ongoing discussions about LayerZero's architecture, regulatory scrutiny following major hacks, and protocol-level migrations. Altcoins face amplified sensitivity because LayerZero serves as critical infrastructure for many layer 2 and alternative chain ecosystems. Key mechanisms: loss of confidence reduces cross-chain volume; risk aversion shifts capital toward safer assets; liability uncertainty creates regulatory tail risks; alternative infrastructure (Chainlink) gains relative attractiveness. Assumptions include that regulators will eventually address cross-chain bridge governance and that market will continue repricing LayerZero ecosystem exposure as new information emerges. Major uncertainties: whether additional dependent protocols face similar vulnerabilities, regulatory timeline and harshness, speed of migration to alternatives, and cascade effects through interconnected DeFi protocols.
Expected impact
The Kelp DAO hack represents a major security failure in the DeFi ecosystem, directly implicating cross-chain bridge infrastructure used by numerous protocols. The $292 million loss and ongoing dispute over responsibility between Kelp and LayerZero creates sustained negative sentiment toward bridge-dependent projects. Primary impacts: (1) Altcoins face significant downward pressure, particularly those relying on LayerZero infrastructure; (2) DeFi protocols experience reduced confidence and potential user withdrawal; (3) Risk-off sentiment favors Bitcoin and stablecoins over altchain exposure; (4) Kelp's migration to Chainlink signals market-wide diversification away from LayerZero. The incident remains newsworthy because the blame attribution remains disputed and the full liability implications continue to unfold. Secondary impacts include reduced trading volumes on affected bridges and increased scrutiny of single-verifier setups in cross-chain design. Altcoins show 2-3x greater sensitivity than Bitcoin due to concentration in DeFi ecosystem.