Kelp says April 18 rsETH exploit traced to LayerZero infrastructure compromise

Kelp said the rsETH incident on April 18 was caused by a breach affecting LayerZero infrastructure. According to the team, two LayerZero RPC nodes were compromised and a third was hit by a DDoS attack, allowing an attacker to drain assets from the bridge adapter by sending a forged cross-chain message. Kelp said its own systems were not part of the impacted infrastructure and added that it is coordinating with Aave, LayerZero and other stakeholders to assess the damage, put mitigations in place and map out recovery steps for the protocol.