1 article
A forged LayerZero lzReceive call drained 116,500 rsETH from KelpDAO on April 18. The attacker converted stolen tokens into Aave collateral, triggering $280M in bad debt, 100% ETH utilization, and a $6.28B TVL collapse across DeFi.