Stolen 292 million still not enough

The hacker who attacked Kelp DAO did something even more extreme
He directly deposited the stolen 116,500 rsETH into Aave as collateral, borrowing a large amount of WETH
Then disappeared
Leaving behind 236 million in bad debt, rotten in Aave
This act is comparable to stealing your property deed, then going to the bank for a loan and fleeing
The total loss is not 292 million, but 292 million plus 236 million, nearly 500 million
And Aave, SparkLend, and Fluid protocols all urgently froze rsETH-related markets, Kelp only reacted 46 minutes later
46 minutes is enough time for the hacker to transfer several rounds on-chain
LayerZero cross-chain bridge was taken down this way—attackers forged a "legitimate" cross-chain instruction, making the bridge think it was a normal transfer, 116,500 rsETH, but 18% of the rsETH circulating supply was directly drained
This is the biggest DeFi attack of 2026, bar none
But have you noticed? BTC didn’t drop at all today
In the past, DeFi incidents would shake the entire market, but now BTC doesn’t care at all—institutional pricing logic has decoupled BTC from DeFi black swans
If you have rsETH positions, don’t move them today. Wait until Kelp announces compensation plans
The main trend remains unchanged—waiting for the FOMC
#DeFi #BTC #KelpDAO #On-chain Security