Aave releases a recap of the rsETH incident on April 18th.

According to Mars Finance, on May 31st, Aave released its post-incident investigation into the April 18th rsETH incident, stating that the Kelp liquid staking protocol's rsETH LayerZero V2 cross-chain bridge received forged messages during the Unichain-to-Ethereum cross-chain process, causing the Ethereum-side adapter to release 116,500 rsETH, while no corresponding destruction occurred on the Unichain side. Aave stated that the attack occurred on a third-party cross-chain bridge infrastructure, but the attacker deposited the stolen rsETH into 8 Aave V3 positions and lent out 82,650 WETH and 821 wstETH, affecting the Aave market. Aave stated that the attacker's rsETH on Arbitrum has now been destroyed, and the LayerZero OFT adapter has been replenished with 116,131.72 rsETH in 5 batches, fully restoring rsETH asset backing. The affected WETH and rsETH markets have returned to normal.