KelpDAO suffers $292M exploit as Aave freezes rsETH markets

The DeFi ecosystem suffered a major blow as KelpDAO's liquid staking token rsETH was exploited for approximately $292 million through a LayerZero-based bridge attack. [Shoal Research Hub](https://t.me/shoalresearch/13927) first reported the exploit, with [The Block](https://www.theblock.co/post/397988/kelp-daos-rseth-bridge-apparently-exploited-for-roughly-292-million-in-layerzero-based-attack) confirming the attack involved minting $292M from a compromised 1-of-1 LayerZero DVN configuration. The link">ripple effects were immediate and severe. The attacker deposited the stolen rsETH into Aave as collateral and borrowed approximately $236M in WETH against it, creating roughly $177M in bad debt according to [defiprime](https://t.me/defiprime/10680). Aave's risk management team responded quickly, freezing rsETH markets on both Aave V3 and V4 to prevent further contagion, with [Shoal Research Hub](https://t.me/shoalresearch/13924) confirming that "Aave's contracts have not been exploited and this is an exploit related to rsETH." The technical details reveal this was a configuration issue rather than a smart contract bug. Kelp's emergency pauser multisig managed to freeze the protocol's core contracts roughly 46 minutes after the successful drain, blocking two follow-up attempts. However, the damage was done, and this incident is set to trigger Umbrella's first real-money slashing event, marking a significant stress test for DeFi's risk management infrastructure.

link">Aave achieved a landmark governance milestone with the passage of its "Will Win" proposal, fundamentally rewiring the protocol's economics. [Artemis Big Fundamentals](https://research.artemisanalytics.com/p/this-week-in-digital-finance) highlighted this as "arguably the most consequential DeFi governance event of the year so far," as the DAO now captures 100% of Aave-branded app-layer revenue rather than sharing it with external partners. This restructuring positions Aave to directly benefit from the growth of its ecosystem applications and could significantly impact the protocol's revenue generation. The timing is particularly relevant given the rsETH exploit response, which demonstrated Aave's operational capabilities during a crisis. The governance change represents a shift toward greater protocol sovereignty and direct value capture, setting a precedent for how other major DeFi protocols might restructure their economics.

Major exchanges launched investigations into alleged manipulation of the RAVE token following accusations from blockchain investigator ZachXBT. [The Block](https://www.theblock.co/post/397991/ravedao-team-denies-role-in-rave-token-pump-as-binance-bitget-open-investigations) reported that ZachXBT alleged a pump-and-dump scheme and offered a $25,000 bounty for whistleblowers, while the RaveDAO team denied any involvement. [Shoal Research Hub](https://t.me/shoalresearch/13916) confirmed that Bitget has started investigating the issue, with ZachXBT alleging the pump was driven by insiders controlling most of the supply. The investigation represents a significant enforcement action that could set precedents for how exchanges handle manipulation allegations, particularly when they involve coordinated insider activity rather than external market manipulation.

The link">Bitcoin mining sector saw potential expansion as aluminum giant Alcoa neared a deal to sell a dormant New York smelter site to Bitcoin miner NYDIG. [The Block](https://www.theblock.co/post/397983/alcoa-nears-deal-to-sell-dormant-new-york-smelter-site-to-bitcoin-miner-nydig-bloomberg) reported the transaction should close in the middle of this year, as part of Alcoa's broader effort to offload 10 dormant US smelter sites. This development reflects the ongoing trend of Bitcoin miners acquiring industrial sites with existing power infrastructure, potentially providing more cost-effective mining operations. The conversion of traditional industrial facilities to Bitcoin mining represents a significant shift in how mining capacity is being developed in the US market.

The intersection of traditional finance and crypto continues evolving, with [Coin Bureau](https://www.youtube.com/watch?v=kr3xb09brcE) warning about risks in the $3 trillion private credit market where "default rates have already surpassed the 2008 crisis peak." The analysis suggests major institutions are betting against private credit with "almost zero oversight," creating potential systemic risks that could impact crypto markets. [Artemis Big Fundamentals](https://research.artemisanalytics.com/p/this-week-in-digital-finance) noted improving market sentiment with "cautious risk-on" conditions as the U.S.-Iran ceasefire reduced geopolitical risk premiums in both commodity and crypto markets. Spot BTC ETF flows turned net positive for the second consecutive week, indicating institutional appetite remains intact despite broader market concerns.