KelpDAO’s $280M Farce: A Comedy of Errors in DeFi

by

Ah, behold the grand spectacle of modern finance! On the fateful day of April 18, 2026, a cunning rogue hath exploited the minting folly within KelpDAO’s rsETH, a liquid restaking token, and thus pilfered a sum exceeding $280 million from the vaults of Ethereum and Arbitrum. What a jest upon the stage of DeFi!

Key Farces to Note:

  • ZachXBT, the vigilant sentinel, doth sound the alarm of a $280M+ theft across the realms of DeFi on April 18, 2026.
  • KelpDAO’s rsETH minting folly hath spawned bad debt upon Aave V3, causing the AAVE token to tumble by 10-13%. A tragicomic fall, indeed!
  • KelpDAO, ever the silent player, hath not confirmed this exploit. Analysts, like hounds on the scent, pursue six wallets in hopes of a clue to this financial masquerade.

Ethereum DeFi Farce: KelpDAO’s rsETH Drains $280 Million in a Blink

The intrepid investigator, ZachXBT, didst post the initial decree upon his Telegram stage, unveiling six wallets tied to this grand larceny. Lo, the wallets were funded through Tornado Cash, a haven for those who seek to veil their tracks. Though ZachXBT didst not name KelpDAO directly, the onchain analysts, like shrewd detectives, connected the threads within hours.

“KelpDAO, it seems, hath lost $280M+ but an hour ago on Ethereum and Arbitrum,” quoth ZachXBT. “The rogues’ wallets were funded via Tornado Cash, a cloak of shadows.”

The plot, alas, follows a well-worn script. Reports tell that the scoundrels exploited a flaw in rsETH’s minting logic, conjuring a vast volume of the liquid restaking token sans proper collateral. This inflated rsETH was then deposited into Aave V3’s lending markets on both Ethereum and Arbitrum, whence the attacker borrowed copious amounts of ETH and other treasures.

Once the collateral was revealed as naught but air, Aave was left holding the bag of bad debt. The crowd doth estimate losses from $100 million to $293 million, a sum equivalent to 116,500 ETH at current prices. AAVE, poor soul, didst plummet by 10-13% upon this news, as the market weighed the burden of bad debt.

Liquid restaking tokens like rsETH, deep within the labyrinth of DeFi composability, are accepted as collateral across multiple lending markets. Thus, a minting exploit doth spread losses like a plague. The KelpDAO incident doth illustrate this risk most vividly.

The attacker wallets, listed by ZachXBT, showed vast ETH positions held on Aave and Compound. One address alone held $120 million in ETH on Aave at the moment of detection. The funds were swiftly moved, like a thief in the night.

The use of Tornado Cash to pre-fund the wallets is a tactic as old as time, employed by rogues to obscure their origins. It doth not herald a new technique but confirms the operation was deliberate and planned.

As of 3 p.m. ET on April 18, KelpDAO hadst not uttered a word nor published a post-mortem. The crowd awaited with bated breath for a response from the project’s X account or website, as well as Aave’s governance channels for emergency actions.

DeFi security firms, including Peckshield, Slowmist, and others, hadst not yet published detailed breakdowns, reflecting the swiftness of this drama. ZachXBT hadst not posted a follow-up naming KelpDAO in public channels, but the address overlap drew a clear line.

This farce is separate from the Drift Protocol exploit, first reported by Bitcoin.com News on April 1, 2026, wherein $280 million was drained primarily on Solana before USDC was bridged to Ethereum via CCTP. The mechanics, chains, and timelines are distinct, yet both tales share a common thread of folly.

Those holding rsETH or related positions on Aave, Compound, or other lending markets were advised to review their exposure while the situation remained unresolved. The six attacker wallets, identified by ZachXBT, remain active targets for onchain tracing as analysts map the funds’ journey after leaving Aave.

Read More

2026-04-18 22:28