Aave Releases Post-Mortem on April 18 rsETH Incident, Affected Markets Restored

ME News reports that on May 31 (UTC+8), Aave released a post-incident investigation into the rsETH event on April 18, revealing that Kelp’s rsETH LayerZero V2 cross-chain bridge accepted forged messages during the cross-chain transfer from Unichain to Ethereum, resulting in the release of 116,500 rsETH on the Ethereum side without a corresponding burn on the Unichain side. Aave stated that the attack occurred via a third-party cross-chain bridge infrastructure; however, the attacker deposited the stolen rsETH into eight Aave V3 positions and borrowed 82,650 WETH and 821 wstETH, impacting Aave markets. Aave noted that the rsETH held by the attacker on Arbitrum has been burned, and the LayerZero OFT adapter has replenished 116,131.72 rsETH in five batches, fully restoring rsETH asset backing. The affected WETH and rsETH markets have returned to normal. (Source: Foresight News)