SECURITY
On April 18, a hacker minted 116,500 rsETH tokens out of nothing.
A hacker exploited a vulnerability in Kelp DAO's bridge by forging a cross-chain message to mint 116,500 rsETH tokens, using them as collateral on Aave to borrow $236 million in ETH. This triggered a $5.4 billion withdrawal from Aave, causing the protocol's ETH pool to reach 100% utilization and the AAVE token to drop 19%. Justin Sun later withdrew $154 million and publicly negotiated with the hacker.
Mentioned