In response to the KelpDAO rsETH incident, Euler has liquidated the attacker’s remaining positions on Ethereum. Collateral recovered through those liquidations has been moved to the Euler DAO operational multisig while next steps are assessed. No other user positions were affected by this action.

#PeckShieldAlert# The @KelpDAO exploiter has finished moving all funds from #Ethereum# to #Bitcoin#, primarily routed through @THORChain - totaling $1,979 BTC. Meanwhile, the @Balancer exploiter has broken 5 months of dormancy. They’ve begun laundering funds via #Thorchain#, bridging $700K worth of $ETH into #BTC#.

#PeckShieldAlert# The @KelpDAO exploiter bridged $ETH from #Ethereum# to #Arbitrum# via @AcrossProtocol, swapped for $USDT0, and subsequently routed funds to @trondao via @LayerZero_Core

#PeckShieldAlert# The @KelpDAO exploiter has begun laundering stolen funds (~$176M). They have started bridging small batches of funds from #Ethereum# to $BTC via @THORChain, @UmbraCash, @chainflip, and @BitTorrent.

#PeckShieldAlert# The @KelpDAO exploiter is the #8# largest variableDebtEthWETH holder on #Aave# (#Ethereum#) with 52,443.94 units ($123M), and the #4# largest variableDebtarbWETH holder on #Arbitrum# with 12,381.93 units ($22M) Total Holding: 106,466.7 $ETH (~$250M)

An update on the rsETH incident involving @KelpDAO. To our Mantle community, ecosystem builders, and partners, following our initial statement earlier this week, we want to share where things stand, what has been confirmed, and how we are moving forward. 1. Mantle remains fully secure. Our underlying network, official bridges, and core assets have not been compromised. @LayerZero_Core has confirmed in its KelpDAO Incident Statement that the exploit was isolated entirely to KelpDAO's rsETH configuration, with zero contagion to any other asset or application. The attacker did not interact with Mantle contracts or Mantle markets at any point. The localized liquidity pressure observed in recent days reflects spillover from that third-party cross-chain vulnerability, not any issue with Mantle's infrastructure. The protective pauses outlined in our prior statement remain in place and will be lifted once our team and ecosystem partners confirm it is appropriate to do so. 2. The Mantle ecosystem is resilient. Since April 18, capital has been steadily flowing back into the Mantle ecosystem. Onchain data shows cumulative repayments across core USD assets have reached approximately $204 million within 48 hours. Liquidity conditions continue to normalize, and the strength of the recovery speaks to the depth and resilience of the Mantle community. 3. Mantle is standing together with our ecosystem. Mantle is in active coordination and communication with the @aave team and affected protocols on a coordinated recovery plan, including potential treasury participation. We will continue to share meaningful updates as the situation develops. Through moments like these, Web3's strength shows how we stand together. That's where we are, and where we'll remain. We stand firmly with our builders. Thank you for standing with us. Stay safe.