#rsETHAttackUpdate

The Black Monday of DeFi How the 292 Million Dollar rsETH Attack Shook the Ecosystem
On the morning of April 18 2026 the decentralized finance world woke up to the biggest shock of the year KelpDAO liquid restaking token rsETH was subjected to 116 500 fake mints due to the single validator structure on the LayerZero bridge Within minutes 292 million dollars of uncollateralized assets were injected into the heart of DeFi
The attacker did not stop By using the fake rsETHs they created as collateral they borrowed 190 million dollars worth of real ETH from Aave V3 The chain reaction was terrifying Aave total value locked crashed from 26 4 billion dollars to 15 billion dollars in 48 hours There was a 13 billion dollar outflow across DeFi
How Did the Attack Happen
Weak Link Kelp Unichain Ethereum rsETH bridge was 1 of 1 DVN meaning single validator
46 Minute Heist The fake packet was sent from Unichain to Ethereum and 116 500 rsETH were released with the approval of a single validator
Contagion The fake tokens were distributed to 7 different addresses and used as collateral on Aave and Arbitrum
DeFi United Historic Rescue Operation
After the attack the sector united and started an unprecedented solidarity effort under the name DeFi United So far over 43 500 ETH or 101 million dollars of funds have been raised
Who Contributed What
Aave DAO Proposed a historic contribution of 25 000 ETH This is the largest support a treasury has given to an incident response in DeFi history
Mantle Offered a 36 month credit line of up to 30 000 ETH to Aave
Lido DAO Proposed a one time contribution of 2 500 stETH
Arbitrum Security Council Froze 30 766 ETH in the wallet linked to the attacker
Lido Activated a 3 million dollar first loss buffer for the 9 percent rsETH risk in the EarnETH vault
What Was the Impact on the Market
1 rsETH Depeg After the attack the rsETH price dropped to 1 723 dollars a 500 dollar spread opened while ETH was at 2 270 dollars
2 Liquidity Crisis rsETH markets were frozen on 11 chains including Aave Compound and SparkLend
3 Bridge Security Debate The risk of single DVN structures came to the agenda again Flare increased its validator network from 2 to 4
What Will Happen Now
According to KelpDAO the rsETHs on the mainnet are fully collateralized but the versions on L2s are only 26 46 percent collateralized To reach the recovery plan 120 015 ETH needs to be put into the LayerZero lockbox Aave governance continues voting and Mantle and other protocols are trying to formalize their contributions
This event proved that not smart contracts but peripherals like bridges and oracles are now the biggest attack surface The next winners of DeFi will be the protocols that can survive this lesson