--- title: "Crypto hack worth US$290 million triggers DeFi contagion shock" type: "News" locale: "en" url: "https://longbridge.com/en/news/283248621.md" description: "Hackers exploited a cross-chain bridge, draining nearly US$300 million from decentralized finance (DeFi) infrastructure, marking the largest DeFi exploit of 2026. The attack affected multiple platforms, with Kelp DAO reporting suspicious activity involving its token, rsETH. The interconnectedness of DeFi protocols led to a broader market issue, prompting Aave to freeze rsETH markets to mitigate damage. The incident highlights the risks of interconnected systems in DeFi, as assets like rsETH are reused across various services. The hack surpasses previous breaches, occurring at a critical time for the sector." datetime: "2026-04-19T09:39:46.000Z" locales: - [zh-CN](https://longbridge.com/zh-CN/news/283248621.md) - [en](https://longbridge.com/en/news/283248621.md) - [zh-HK](https://longbridge.com/zh-HK/news/283248621.md) --- # Crypto hack worth US$290 million triggers DeFi contagion shock HACKERS exploited a cross-chain bridge on Saturday (Apr 18), draining nearly US$300 million from a key piece of decentralised finance infrastructure and setting off a ripple effect across multiple crypto platforms. The attacker siphoned about 116,500 rsETH – a token issued by Kelp DAO that represents “restaked” Ether – by targeting a bridge built using LayerZero, a system that allows different blockchains to communicate. The total losses are estimated at roughly US$293 million, making it the largest DeFi exploit of 2026. “We identified suspicious cross-chain activity involving rsETH,” Kelp DAO said in a post on X. Kelp DAO is a restaking protocol that lets users deposit popular staking tokens such as stETH or cbETH and receive rsETH in return, which can then be used across other crypto applications while still earning rewards. This flexibility has helped rsETH spread widely across decentralised lending, trading and liquidity platforms. That same interconnectedness quickly turned the breach into a broader market issue. “This was not just a protocol exploit, it immediately became a cross-protocol contagion event,” security firm Cyvers said, estimating that at least nine other platforms were affected. In simple terms, DeFi protocols are often stacked on top of each other. Assets such as rsETH are reused across multiple services, for example, as collateral for loans or as liquidity in trading pools. When one piece fails, it can undermine all the places where that asset is used. “This is exactly the kind of incident that highlights the risks” of interconnected systems in DeFi, said Cyvers chief executive Deddy Lavid. “The challenge is no longer just preventing exploits at the contract level, but understanding how fast they can cascade across integrated protocols.” Aave, the largest DeFi lending protocol with more than US$20 billion in locked assets, froze markets related to rsETH to contain the damage. “Freezing the rsETH markets prevents new deposits and borrowing against rsETH collateral while the situation is assessed,” the platform said. Its token was down 20 per cent during Asian trading hours on Sunday, according to Coingecko. Cyvers chief technology officer Meir Dolev said the situation could have been worse. The protocol was “just three minutes away from losing an additional US$100 million”, he said, with a rapid blacklist blocking a second attempt by the attacker. The hack surpasses an earlier breach of Solana-based project Drift as the biggest DeFi exploit this year, and comes at a sensitive moment for the sector. BLOOMBERG ### Related Stocks - [CRCL.US](https://longbridge.com/en/quote/CRCL.US.md) - [GLXY.US](https://longbridge.com/en/quote/GLXY.US.md) - [HUT.US](https://longbridge.com/en/quote/HUT.US.md) - [ABTC.US](https://longbridge.com/en/quote/ABTC.US.md) - [BTC.US](https://longbridge.com/en/quote/BTC.US.md) - [GBTC.US](https://longbridge.com/en/quote/GBTC.US.md) - [ETHE.US](https://longbridge.com/en/quote/ETHE.US.md) - [BITF.US](https://longbridge.com/en/quote/BITF.US.md) - [COIN.US](https://longbridge.com/en/quote/COIN.US.md) - [BTCO.US](https://longbridge.com/en/quote/BTCO.US.md) - [EZET.US](https://longbridge.com/en/quote/EZET.US.md) - [REKT.US](https://longbridge.com/en/quote/REKT.US.md) - [BTCW.US](https://longbridge.com/en/quote/BTCW.US.md) - [EETH.US](https://longbridge.com/en/quote/EETH.US.md) - [BLOK.US](https://longbridge.com/en/quote/BLOK.US.md) - [BSOL.US](https://longbridge.com/en/quote/BSOL.US.md) - [ETH.US](https://longbridge.com/en/quote/ETH.US.md) - [IMRA.US](https://longbridge.com/en/quote/IMRA.US.md) - [MRAL.US](https://longbridge.com/en/quote/MRAL.US.md) - [CONL.US](https://longbridge.com/en/quote/CONL.US.md) - [IBIT.US](https://longbridge.com/en/quote/IBIT.US.md) - [COIW.US](https://longbridge.com/en/quote/COIW.US.md) - [BLCN.US](https://longbridge.com/en/quote/BLCN.US.md) - [ETHW.US](https://longbridge.com/en/quote/ETHW.US.md) - [ARKB.US](https://longbridge.com/en/quote/ARKB.US.md) - [COIG.US](https://longbridge.com/en/quote/COIG.US.md) - [BITB.US](https://longbridge.com/en/quote/BITB.US.md) - [ETHA.US](https://longbridge.com/en/quote/ETHA.US.md) - [SMST.US](https://longbridge.com/en/quote/SMST.US.md) - [BITO.US](https://longbridge.com/en/quote/BITO.US.md) ## Related News & Research - [Australia orders Cryptolink Bitcoin ATMs offline over ‘basic reporting’ failures](https://longbridge.com/en/news/295358584.md) - [Coincheck Group publishes presentation on Japan crypto regulatory roadmap, FIEA shift and potential 20% retail tax](https://longbridge.com/en/news/295128315.md) - [Hut 8 (HUT) Earnings Jolt Puts Its AI And Crypto Valuation Story To The Test](https://longbridge.com/en/news/295049729.md) - [Hut 8 Affirms Commitment to Responsible Data Center Development Following Directive from Texas Governor Greg Abbott | HUT Stock News](https://longbridge.com/en/news/295417240.md) - [HUT stock rises overnight: Why this analyst sees a 68% upside despite Q2 miss](https://longbridge.com/en/news/294901819.md)