April 18, 2026 rsETH Incident Post Mortem On April 18, 2026, at 17:35 UTC, Kelp's rsETH LayerZero V2 bridge from Unichain to Ethereum accepted a forged cross-chain message. The message appeared valid but described a source-side burn on Unichain that never occurred. As a result, 116,500 rsETH was re
April 18, 2026 rsETH Incident Post Mortem On April 18, 2026, at 17:35 UTC, Kelp's rsETH LayerZero V2 bridge from Unichain to Ethereum accepted a forged cross-chain message. The message appeared valid but described a source-side burn on Unichain that never occurred. As a result, 116,500 rsETH was re
吴说获悉, Aave 发布 4 月 18 日 rsETH 事件事后调查称,流动性质押协议 Kelp 的 rsETH LayerZero V2 跨链桥在 Unichain 至 Ethereum 跨链过程中接受伪造消息,导致 Ethereum 侧适配器释放 116,500 枚 rsETH,而 Unichain 侧并未发生对应销毁。 Aave 表示,攻击发生于第三方跨链桥基础设施,但攻击者将被盗 rsETH 存入 8 个 Aave V3 仓位,并借出 82,650 枚 WETH 和 821 枚 wstETH,导致 Aave 市场受影响。Aave 称,目前攻击者在 Arbitrum 上的 rsETH
April 18, 2026 rsETH Incident Post Mortem On April 18, 2026, at 17:35 UTC, Kelp's rsETH LayerZero V2 bridge from Unichain to Ethereum accepted a forged cross-chain message. The message appeared valid but described a source-side burn on Unichain that never occurred. As a result, 116,500 rsETH was re
Aave发布Kelp rsETH桥攻击事后调查 4 月 18 日,攻击者通过 RPC 中毒攻击伪造 LayerZero V2 跨链消息,在以太坊侧释放 116,500 rsETH,随后存入 Aave V3 借出约 82,650 WETH 和 821 wstETH。Aave 强调漏洞源于第三方桥基础设施,协议合约本身未受损。 目前 rsETH 相关功能已全面恢复,受影响市场 WETH LTV 已重置。Arbitrum DAO 已投票授权将冻结 ETH 转移至 Aave LLC,等待链上执行,法院仍在审理相关限制令。

