Kelp DAO Burns Exploiter's rsETH Tokens on Arbitrum

Kelp DAO successfully burned the attacker's rsETH tokens on Arbitrum and unveiled a comprehensive two-week recovery plan utilizing Aave's Recovery Guardian multisig wallet to restore the protocol's token supply. The liquid staking protocol had paused withdrawals following the exploit, which drained significant liquidity from the system.

This incident underscores the ongoing security challenges facing DeFi protocols, particularly liquid staking platforms that have become critical infrastructure as bitcoin institutional adoption and broader crypto adoption accelerate. The swift response demonstrates the maturation of crisis management protocols within DeFi, with multisig recovery mechanisms proving their value in containing damage. Kelp's methodical approach—burning exploited tokens first, then systematically refilling liquidity—reflects lessons learned from previous DeFi exploits and establishes a template for future incident responses.

Two-Week Recovery Plan to Resume Withdrawals

The exploit highlights persistent vulnerabilities in cross-chain protocols, where Arbitrum's layer-2 infrastructure creates additional attack vectors beyond mainnet Ethereum. Liquid staking protocols have emerged as systemically important as they facilitate staking while maintaining liquidity, but their complexity introduces novel risk vectors that traditional validators don't face.

• **Recovery timeline execution** — whether Kelp meets its two-week restoration target and maintains user confidence throughout the process

DeFi Security Challenges and Liquid Staking Risks

• **Cross-chain security improvements** — how other liquid staking protocols respond with enhanced safeguards for multi-chain operations

The incident reinforces that even as institutional players increasingly embrace crypto infrastructure, operational security remains paramount for protocols handling significant user funds across multiple networks.

#KelpDAO #DeFiSecurity #LiquidStaking