Aave Releases Post-Mortem on the April 18 rsETH Incident

Huo Xing Cai Jing reports that on May 31, Aave released a post-incident investigation into the rsETH event on April 18, revealing that Kelp’s rsETH LayerZero V2 cross-chain bridge accepted forged messages during the cross-chain transfer from Unichain to Ethereum, resulting in the Ethereum-side adapter releasing 116,500 rsETH without a corresponding burn on the Unichain side. Aave stated that the attack occurred via a third-party cross-chain bridge infrastructure, but the attacker deposited the stolen rsETH into eight Aave V3 positions and borrowed 82,650 WETH and 821 wstETH, impacting Aave markets. Aave noted that the rsETH held by the attacker on Arbitrum has been burned, and the LayerZero OFT adapter has replenished 116,131.72 rsETH in five batches, fully restoring rsETH asset backing. The affected WETH and rsETH markets have returned to normal.