Chainalysis Flags Critical Blind Spot in DeFi Security as $292M Exploit Bypasses Burn Verification
Chainalysis flagged a $292M DeFi exploit on April 20, 2026, involving KelpDAO’s rsETH bridge that exploited LayerZero infrastructure and a 1-of-1 validator quorum. Attackers compromised RPC endpoints to fake a burn event, enabling the release of 116,500 rsETH on Ethereum despite no corresponding burn. Chainalysis warned the incident reveals a critical blind spot in cross-chain trust assumptions and urged real‑time invariant monitoring to detect impossible states. Market implications include heightened risk aversion toward cross‑chain protocols and broader DeFi services, potential sell pressure on related tokens, increased regulatory and audit scrutiny, and amplified short‑term downside sentiment across crypto markets.