Odaily Planet Daily report: Aave has released a post-incident investigation into the rsETH event on April 18, revealing that Kelp’s rsETH LayerZero V2 cross-chain bridge accepted forged messages during the cross-chain transfer from Unichain to Ethereum, resulting in the release of 116,500 rsETH on the Ethereum side without a corresponding burn on the Unichain side. Aave stated that the attack occurred on third-party cross-chain bridge infrastructure; however, the attacker deposited the stolen rsETH into eight Aave V3 positions and borrowed 82,650 WETH and 821 wstETH, impacting the Aave market.
Aave stated that the attacker's rsETH on Arbitrum has been destroyed, and the LayerZero OFT adapter has been replenished in five batches with 1,161,317.2 rsETH, fully restoring rsETH asset backing. The affected WETH and rsETH markets have returned to normal.



