Aave Publishes Postmortem on April 18 rsETH Incident

Aave on May 31 published a post-incident report into the April 18 rsETH event, detailing how Kelp's rsETH LayerZero V2 cross-chain bridge accepted forged messages during a transfer from Unichain to Ethereum. The flaw caused the Ethereum-side adapter to release 116,500 rsETH without a corresponding burn on the Unichain side. Aave said the exploit originated in third-party cross-chain bridge infrastructure. The attacker deposited the illicit rsETH into eight Aave V3 positions and borrowed 82,650 WETH and 821 wstETH, creating disruption across affected Aave markets. Aave added that the attacker's rsETH on Arbitrum has since been burned. The LayerZero OFT adapter has replenished 116,131.72 rsETH across five batches, fully restoring rsETH asset backing. The impacted WETH and rsETH markets have returned to normal operations.