Aave investigates rsETH incident and confirms cross chain bridge vulnerability, resulting in 116500 rsETH being released

Aave released an investigation report on the rsETH incident on April 18th, stating that Kelp's rsETH LayerZero V2 cross chain bridge accepted forged messages during the cross chain process from Unichain to Ethereum, resulting in the release of 116500 rsETH on the Ethereum side, while the corresponding amount was not destroyed on the Unichain side. The attacker deposited stolen rsETH into 8 Aave V3 positions, lent 82700 WETH and 821 WStETH, affecting the Aave market. Aave stated that the attacker's rsETH in Arbitrarum has been destroyed, and the LayerZero OFT adapter has been replenished with 116100 rsETH in 5 batches. Asset support has been fully restored, and the affected market has returned to normal.