Kelp DAO, Aave Resume rsETH Operations After $292M Exploit

Kelp DAO was exploited on April 18 for $292 million in what security researchers attribute to attackers linked to North Korea's Lazarus Group. The breach affected rsETH, the restaking token at the core of Kelp's liquid restaking protocol built on Ethereum.

Following the incident, both Kelp DAO and Aave have announced plans to resume operations for rsETH. The recovery process includes enhanced security audits and protocol upgrades designed to prevent similar attacks. Kelp's development team conducted comprehensive reviews of smart contract vulnerabilities that enabled the initial breach.

The $292 million exploit represents one of the largest cryptocurrency thefts in 2024. Investigators traced transactions to addresses associated with the Lazarus Group, the same organization linked to previous high-profile crypto heists including the $100 million Ronin bridge attack in 2022.

Aave's decision to support rsETH operations demonstrates institutional confidence in Kelp's recovery measures. The integration allows users to deposit rsETH as collateral across Aave's lending protocols. This reinstatement signals market stabilization following the April incident.

From my perspective covering digital asset security, this recovery underscores both the vulnerability of restaking protocols and the resilience of decentralized finance infrastructure. While the breach exposed critical gaps in Kelp's architecture, the coordinated response from major platforms like Aave indicates the ecosystem's commitment to maintaining operational continuity.

Users should verify all security updates before resuming deposits. Kelp DAO has published detailed documentation of implemented fixes and compensation mechanisms for affected parties. Monitor official channels for announcements regarding further protocol enhancements.

Not financial advice.