Aave Publishes Post-Mortem on April 18 rsETH Incident, 116,500 Tokens Released by Fake Bridge Message

According to BlockBeats, Aave released its investigation on May 31 into the April 18 rsETH incident. The LayerZero V2 cross-chain bridge operated by liquid staking protocol Kelp accepted a forged message during a cross-chain transfer from Unichain to Ethereum, causing the Ethereum-side adapter to release 116,500 rsETH without a corresponding burn on Unichain.

Attackers deposited the stolen rsETH into eight Aave V3 positions and borrowed 82,650 WETH and 821 wstETH, impacting Aave markets. Aave stated that the attacker's rsETH on Arbitrum has been destroyed, LayerZero OFT adapters have replenished 116,131.72 rsETH across five batches, and affected WETH and rsETH markets have fully recovered.