Kelp rsETH
Kelp

Kelp rsETH

Kelp rsETH is a liquid restaking token on Ethereum representing ETH staked across multiple EigenLayer operators. Yield is generated from Ethereum consensus and execution layer rewards combined with EigenLayer restaking rewards. On April 18, 2026, a bridge exploit drained approximately $292M from the LayerZero OFT escrow; contracts are currently paused and approximately 18% of supply is unbacked.

AUM
$1.57b+11.43%
APY
0.79%-69.96%
DRated Protocol
Updated Apr 20, 2026

Risk Rating

D
AAAAAABBBBBBCCCCCCD

This rating is based solely on publicly available information. The range from D to BBB reflects the gap between the current assessment and the potential rating achievable if all identified improvement areas are addressed.

SCSKMPMLCPMICEPCEGFRTLCDT
SCS: Smart Contract Security
KMP: Key Management Permissions
M: Market
L: Liquidity
C: Collateral
PM: Protocol Mechanics
ICE: Infra Counterparty Exposures
PCE: Protocol Counterparty Exposures
G: Governance
FR: Financial Resilience
TLC: Team Legal Compliance
DT: Documentation Transparency
Potential Score

Provider risk assessed across Business, Operations, Reliability, and Security.

View the detailed scoring breakdown

Challenge this ratingLearn about our ratings

Contract Addresses

TokenContract
0xA129...e5A7
Oracle
0x349A...020d
Timelock
0x49bD...35B1
ProxyAdmin
0xb61e...Dc78
NodeDelegator
0x07b9...9473
LRTDepositPool
0x0366...375D
LRTUnstakingVault
0xc668...84ba
GovernanceMultisig
0xb369...a46d
ChainlinkPriceOracle
0x78C1...d6e6
LRTWithdrawalManager
0x62De...ec16
OFTAdapter (Exploited)
0x85d4...8Ef3

Key Strengths

  • Extensive audit coverage from multiple firms including Sigma Prime (Tier-0) with six engagements; most recent differential audit found zero high or medium findings
  • Strong upgrade governance with a 6-of-8 external admin multisig enforced through a 10-day TimelockController, one of the longest timelocks in the LST space
  • Core Ethereum staking infrastructure remains intact with approximately $1.55B TVL in non-custodial contracts, diversified across three geographically distributed operators with no slashing events
  • Active Immunefi bug bounty program covering core contracts since August 2024, supplemented by Chainlink Proof of Reserve Secure Mint integration
  • Rapid exploit response with on-chain freeze of attacker address within 46 minutes that prevented a second tranche from executing

Key Risks

  • Catastrophic bridge exploit on April 18, 2026 drained approximately $292M from the LayerZero OFT escrow via a single DVN compromise, leaving roughly 18% of rsETH supply unbacked with no recovery or compensation plan
  • Severe composability contagion created substantial bad debt across major lending protocols, triggered billions in TVL outflows, and caused lending market freezes across more than a dozen protocols
  • All rsETH contracts remain paused across Ethereum and all L2 chains with no disclosed timeline for resumption; deposits, withdrawals, and transfers are completely blocked
  • Bridge used a 1-of-1 DVN configuration on nearly all routes despite LayerZero having previously recommended multi-DVN to KelpDAO, representing a known and warned-against single point of failure
  • No financial backstop exists with no disclosed treasury reserves, no safety module, and protocol fee set to zero; the $9M raised in 2024 is negligible relative to the loss
  • rsETH trading at approximately 24% discount to ETH with daily trading volume collapsed by over 97%, effectively eliminating any exit path for holders

Get the full picture today

Request the full rating report and gain access to unparalleled rating data & information.

Request a full report
Rating report illustration