On May 31, Aave published a post-incident investigation regarding the rsETH event that occurred on April 18. The investigation revealed that the rsETH LayerZero V2 cross-chain bridge of the liquidity staking protocol Kelp accepted forged messages during the cross-chain process from Unichain to Ethereum, resulting in the Ethereum side adapter releasing 116,500 rsETH, while the corresponding destruction did not occur on the Unichain side. Aave stated that the attack took place on third-party cross-chain bridge infrastructure, but the attacker deposited the stolen rsETH into eight Aave V3 positions and borrowed 82,650 WETH and 821 wstETH, impacting the Aave market. Aave noted that the attacker’s rsETH on Arbitrum has been destroyed, and the LayerZero OFT adapter has replenished 116,131.72 rsETH in five batches, fully restoring support for rsETH assets, with the affected WETH and rsETH markets returning to normal.
All Comments