DeFiUnited announced KelprsETH vulnerability repair technical solution to liquidate approximately 107,000 token positions for attackers

DeFiUnited announced on Tuesday a technical fix plan for the KelpDAOrsETH cross-chain bridge vulnerability. Previously, attackers used the LayerZone-driven Unichain to Ethereum bridging vulnerability to release 116,500 rsETH by forging inbound packets, of which about 107,000 are still distributed as collateral among seven associated addresses between Aave and Compound.<br /> DeFiUnited said it has obtained enough ETH commitments to restore support for rsETH, will convert to rsETH in batches and inject bridge lock-in contracts. LayerZeroLabs on Tuesday committed to investing more than 10,000 ETH support repairs. In terms of clearing attacker positions, the alliance will implement controlled liquidation through Aave and Compound governance proposals, and it is expected to recover approximately 13,000 and 16,776 ETH respectively.<br /> WETH and rsETH reserves on multiple chains will remain frozen during the repair period. DeFiUnited also warned of execution risks, including governance approval progress, possible interference from attackers, and new security measures that have yet to be verified in the production environment.