Key Takeaways: ZachXBT flagged a $280M+ theft across Ethereum and Arbitrum DeFi protocols on April 18, 2026. KelpDAO’s rsETH minting flaw created bad debt on Aave V3, with AAVE token dropping roughly 10-13%. KelpDAO has not confirmed the exploit; analysts are monitoring six identified attacker wallets for recovery clues. Ethereum DeFi Exploit: KelpDAO rsETH Attack Drains Over $280 Million Onchain investigator ZachXBT posted the initial alert to his public Telegram channel shortly before 3 p.m. ET, listing six wallet addresses tied to the theft and noting that the attacker wallets were funded through Tornado Cash before the drain began. His …