KelpDAO Drained for $293M via LayerZero Bridge Spoof
- DeFi
- Bridge
- Security
Attackers spoofed LayerZero OFT messages to introduce worthless collateral into KelpDAO and drain the vault in roughly 12 minutes. No smart contract bugs were involved. CT watched $293 million vanish as the largest single exploit of June 2026.
Incident Details
- Type
- BRIDGE HACK
- Funds Lost
- $293M
- Status
- Total loss
KelpDAO breach overtook Drift as the largest 2026 exploit to date. Funds moved rapidly across chains with minimal recovery.