Aave’s April 2026 rsETH Incident Post Mortem: How a Forged Bridge Message Shook DeFi

TLDR: A one-of-one DVN configuration on the Kelp rsETH bridge created a single point of failure that attackers exploited. The attacker borrowed 82,650 WETH and 821 wstETH using 89,567 stolen rsETH across eight Aave V3 positions. DeFi United coordinated over $300 million in recovery commitments from Lido, Ethena, Mantle, and other contributors. Aave’s LayerZero OFT [...]

The post Aave’s April 2026 rsETH Incident Post Mortem: How a Forged Bridge Message Shook DeFi appeared first on Blockonomi.