Emergency Response Halts Stolen Funds on Layer 2s, Ignites Debate on Decentralization and Governance Limits

The emergency response to the $292 million exploit of Kelp DAO’s LayerZero-powered bridge prevented stolen funds from moving but ignited a broader debate over governance, control, and the limits of decentralization on Layer 2 networks, according to verified reports from CoinDesk and related developments in the crypto ecosystem.

An attacker drained 116,500 rsETH—approximately 18% of the token’s circulating supply—from Kelp DAO’s bridge on Saturday, April 19, 2026, at 17:35 UTC, triggering emergency freezes across multiple protocols including Aave, SparkLend, Fluid, and Upshift. The stolen assets, valued at roughly $292 million at the time, were stranded across more than 20 blockchain networks due to the cross-chain nature of the bridge, raising immediate concerns about the backing and redeemability of rsETH on Layer 2 solutions.

The incident has since become the largest decentralized finance (DeFi) exploit of 2026, intensifying scrutiny on restaking protocols and their reliance on third-party infrastructure like LayerZero for cross-chain asset transfers. As rsETH is issued by Kelp DAO to represent restaked Ether deposited through EigenLayer, the exploit has cast doubt on whether the token maintains full collateralization across all supported chains, particularly when a significant portion of its backing is held in a single vulnerable bridge.