KelpDAO and Beyond: Unpacking the $13 Billion DeFi Meltdown
At 17:35 UTC on Saturday, April 18, 2026, a single transaction changed hands on the Ethereum blockchain. What that transaction did, in 46 minutes, was drain $292 million from a DeFi protocol called KelpDAO by forging a verification message, depositing the stolen tokens as collateral on the largest lending protocol in DeFi, and borrowing hundreds of millions in real wrapped ether against thin air. By Sunday, $13.21 billion in total value had left DeFi. Aave, which did nothing wrong and whose smart contracts were not compromised, lost $8.45 billion in deposits in 48 hours and is carrying somewhere between $177 million and $236 million in bad debt that may have no clean resolution. This is the biggest DeFi story of 2026. This blog explains exactly what happened, why it happened, and what it reveals about the structural vulnerabilities that allowed a single misconfigured setting to cascade into a $13 billion market event.
By CryptoAcademy Team | Published: 2026-04-20 | 18 min read time read | Category: Educational
What KelpDAO Is and Why It Matters
Before the exploit, KelpDAO was one of the larger protocols in the rapidly growing liquid restaking market. Understanding what it does is essential to understanding how the attack worked.
Ethereum holders who stake ETH to help secure the Ethereum network earn staking rewards. Liquid staking protocols like Lido take this a step further: you deposit ETH, receive a liquid token (stETH in Lido's case) that represents your staked position, and can use that liquid token in DeFi while your ETH continues earning staking rewards.
KelpDAO operates at a third layer called restaking, built on the EigenLayer protocol. Users deposit already-staked ETH into KelpDAO, which then delegates those assets to EigenLayer operators who secure additional networks and services. In return, users receive rsETH, KelpDAO's liquid restaking token. rsETH represents a claim on the restaked ETH plus all associated yield: Ethereum staking rewards, EigenLayer rewards, and KelpDAO's own incentives.
By April 2026, rsETH had crossed $1 billion in total value locked and had been integrated as collateral across most of the major lending markets in DeFi. Aave, the largest DeFi lender, accepted rsETH as collateral because it was considered ETH-correlated: backed one-to-one by real restaked ether.
rsETH lives natively on Ethereum, but its utility depends on being everywhere. Users on Arbitrum, Base, Mantle, Unichain, Linea, Scroll, and more than a dozen other networks need to be able to hold and use rsETH. KelpDAO used LayerZero's cross-chain messaging system to move rsETH between networks. When you want to use rsETH on Arbitrum, a message goes through LayerZero's bridge infrastructure, the bridge on Arbitrum releases or mints an equivalent amount of rsETH, and your position moves.
The bridge that held the rsETH reserves backing all those cross-chain versions was the target. And the security configuration protecting that bridge was a single point of failure.
---
The