DeFi United announced the technical solution for the Kelp rsETH vulnerability, planning to liquidate approximately 107,000 tokens from the attacker’s position

DeFi United announced a technical repair plan for the Kelp DAO rsETH cross-chain bridge vulnerability on Tuesday. Previously, attackers exploited a vulnerability in the LayerZero-driven Unichain to Ethereum bridge, releasing 116,500 rsETH by spoofing inbound data packets, of which approximately 107,000 are still distributed as collateral across seven associated addresses in Aave and Compound.

DeFi United stated that it has secured enough ETH commitments to restore the support for rsETH, which will be converted into rsETH in batches and injected into the bridge lock contract. LayerZero Labs pledged over 10,000 ETH on Tuesday to support the repair work. Regarding the liquidation of the attackers' positions, the alliance will execute controlled liquidations through Aave and Compound governance proposals, expecting to recover approximately 13,000 and 16,776 ETH, respectively.

During the repair period, WETH and rsETH reserves on multiple chains will remain frozen. DeFi United also cautioned about execution risks, including governance approval progress, potential interference from attackers, and new security measures pending validation in the production environment.