An attacker exploited KelpDAO's cross-chain bridge on April 18, stealing 116,500 restaked ETH worth roughly $292 million. The breach triggered more than $13 billion in DeFi TVL outflows within 48 hours, hitting Aave, Compound, Morpho, and at least 9 other protocols.