OneKey's Yishi on KelpDAO hack: 10-15% hacker bounty, LayerZero fund, Aave backstop — don't cut WETH depositors
𝕏/@ohyishi •
Revision history
3 recorded changes
Want your article here?
Promote with Leviathan NewsOneKey founder Yishi laid out a 5-tier playbook for the $292M KelpDAO exploit: negotiate a 10-15% hacker bounty first, then tap LayerZero's ecosystem fund, then have KelpDAO pay in tokens/revenue or sell to L0 or BMNR, with Aave's Umbrella and stkAAVE as the final backstop. His hard line: WETH depositors cannot be cut or it triggers cascading repricing across Morpho, Spark, Fluid, and Euler — which would blacklist the LRT sector and set DeFi back by years. He thinks Aave survives.
TLDR by @Benthic
More coverage
- Explained: The Kelp DAO Hack (April 2026) - Halborn (halborn.com)
- KelpDAO/LayerZero Exploit Drains $290m, Freezes DeFi Markets (galaxy.com)
- Inside the KelpDAO Bridge Exploit - Chainalysis (chainalysis.com)
- Hackers target DeFi protocol Kelp DAO in massive $300m exploit (dlnews.com)
- Kelp DAO bridge hacked for $292 million - Web3 is Going Just Great (web3isgoinggreat.com)
Explore the topic
More on Hacker
Cardano wallet provider SecondFi will shut down after hackers stole $2.4M in ADA by exploiting a transaction-signing flaw that exposed users' private keys
Coindesk ·
Crypto hackers stole $75.9M across 40 incidents in June, down 7% from May, with Humanity Protocol suffering the month's largest exploit at up to $36M
The Block ·
SecondFi losses may exceed $20M as SlowMist founder flags 129M ADA tied to suspected hacker wallets
𝕏/@evilcos ·
Chainalysis signs KNPA deal to train Korean police after DPRK hackers stole over $2B in 2025
Chainalysis ·
Researchers uncover how hackers used over 34 fake npm, PyPI and Rust packages in “TrapDoor” attack targeting Solana, Sui and Aptos developers to steal wallets and cloud credentials
Coindesk ·
Superfortune investigates $GUA multisig transaction that targeted hacker address
𝕏/@SUPERFORTUNE888 ·
Cardano wallet provider SecondFi will shut down after hackers stole $2.4M in ADA by exploiting a transaction-signing flaw that exposed users' private keys
Coindesk ·
Crypto hackers stole $75.9M across 40 incidents in June, down 7% from May, with Humanity Protocol suffering the month's largest exploit at up to $36M
The Block ·
SecondFi losses may exceed $20M as SlowMist founder flags 129M ADA tied to suspected hacker wallets
𝕏/@evilcos ·
Chainalysis signs KNPA deal to train Korean police after DPRK hackers stole over $2B in 2025
Chainalysis ·
Researchers uncover how hackers used over 34 fake npm, PyPI and Rust packages in “TrapDoor” attack targeting Solana, Sui and Aptos developers to steal wallets and cloud credentials
Coindesk ·
Superfortune investigates $GUA multisig transaction that targeted hacker address
𝕏/@SUPERFORTUNE888 ·