Kelp DAO Drained for $292M in Largest Ethereum Exploit of 2026

An attacker drained 116,500 rsETH from Kelp DAO's LayerZero-powered bridge on Saturday, making off with roughly $292 million in the largest crypto exploit of 2026. The stolen tokens, about 18% of rsETH's circulating supply, are now stranded across at least 20 chains. ETH fell 1.7% to $2,319.28 on $12.7 billion in daily volume, with market cap settling at $279.9 billion.

Kelp Exploit Sends Shockwaves Through DeFi

The attack on Kelp DAO's cross-chain bridge triggered what blockchain security firm Cyvers called "cross-protocol contagion," forcing emergency responses from at least nine protocols. Aave, SparkLend, Fluid, and Upshift all enacted emergency freezes as the implications of a compromised restaking token rippled outward. Kelp's own emergency pauser multisig froze core contracts roughly 46 minutes after the drain, blocking two follow-up attempts.

The scale of the damage underscores persistent risk in bridge architectures. Restaking protocols have attracted billions in TVL by offering yield on already-staked ETH, but the composability that makes them attractive also amplifies contagion when something breaks. Kelp's reliance on LayerZero for cross-chain messaging meant the exploit's blast radius extended far beyond a single chain.

The 46-minute response window is worth examining. Fast enough to stop secondary attacks, slow enough that $292 million was already gone. Multisig-controlled emergency mechanisms remain the DeFi standard, but this incident will renew debate about whether automated circuit breakers could have limited the damage.

RAVE Token Under Investigation After 4,500% Spike

Binance and Bitget have both opened investigations into suspected market manipulation of the RAVE token, which surged 4,500% before crashing. Onchain investigator ZachXBT alleged a pump-and-dump scheme and pointed to three wallets holding nearly 90% of RAVE's supply. Millions of tokens were transferred to exchanges before the price spike.

RaveDAO denied any involvement, but the concentration of supply and the timing of exchange deposits tell a familiar story. ZachXBT has offered a $25,000 bounty for whistleblowers. Both exchanges have yet to announce specific enforcement actions.

Prediction Markets Draw TradFi Interest, Skepticism

Charles Schwab and Citadel Securities executives have separately expressed interest in prediction markets, though both firms are steering clear of sports betting. The distinction matters: regulated prediction markets tied to economic or political outcomes are gaining traction as financial instruments, while sports offerings carry regulatory baggage neither firm wants.

The interest arrives as Polymarket and Kalshi compete for market share in event-driven contracts. But not everyone is bullish on the category's retail appeal. Zac Prince, who runs Galaxy's retail platform GalaxyOne, said he struggles to see prediction markets fitting into diversified long-term portfolios. Staking, he argued, offers more durable value for retail investors.

SEC Chair Atkins Accused of Misleading Congress

Senator Elizabeth Warren accused SEC Chair Paul Atkins of deliberately misleading Congress about the agency's enforcement activity. Warren's claim centers on data Atkins presented regarding the SEC's enforcement posture, though specifics of the alleged discrepancy remain unclear. The accusation adds friction to an already contentious relationship between the current commission and congressional oversight.

Jenner Memecoin Lawsuit Dismissed

A federal judge tossed a class-action lawsuit over Caitlyn Jenner's memecoin, ruling that plaintiffs failed to plausibly allege the token was an unregistered security. The decision narrows the legal exposure for celebrity token launches, at least under current securities frameworks. It does not, of course, make buying memecoins a good idea.

AI Vacuums Up Venture Capital, Crypto Adapts

AI companies captured $242 billion in early 2026 venture funding, roughly 80% of global totals. Gartner projects total AI spending will hit $2.52 trillion this year. The fundraising imbalance is forcing crypto startups to adapt their pitches, often by integrating AI components or positioning infrastructure as AI-adjacent. Whether that produces genuine innovation or just better slide decks varies by team.

Magic City Update

Saturday's Kelp DAO exploit carries specific relevance for Miami's growing concentration of restaking and DeFi infrastructure teams. Several Miami-based builders deploy on restaking protocols that use LayerZero messaging, and the contagion across Aave and SparkLend will likely prompt reassessments of bridge risk among South Florida's DeFi operators.

The city's position as a hub for Ethereum infrastructure development means exploit postmortems tend to happen in real time here. Miami's weekly builder meetups, many of which now convene in Wynwood and Brickell coworking spaces, will almost certainly spend the coming week dissecting the 46-minute response gap and debating automated circuit breaker designs. Alchemy, which provides node infrastructure used by many Miami-based teams building on Ethereum and its L2s, sits at the center of these conversations about reliability and composability under stress.

On the regulatory front, Miami-Dade's business-friendly stance on digital assets continues to attract crypto firms, but incidents like this one test the narrative. The city has courted crypto companies since 2021; five years later, the question is whether Miami's builder community can contribute meaningfully to the security infrastructure that prevents nine-figure exploits, not just the products that sit on top of it.

Stablecoins, Oil, and Iran

Iran has designated Bitcoin as a strategic asset for oil toll payments, citing its confiscation-resistant properties. In practice, only dollar-denominated stablecoins have been used. The gap between stated Bitcoin preference and actual Tether usage reveals a familiar pattern: governments may want BTC's properties in theory, but the dollar's liquidity and stability win when invoices need settling.