Login Sign Up
Back to Feed
Infrastructure

BitGo, Polygon Among Industry Giants Pushing Rate Limits After The Largest DeFi Exploit of 2026

🤖 GG AI Summary

The $292 million KelpDAO rsETH exploit on April 19 triggered swift security responses from BitGo, Polygon, and Katana to contain potential contagion, with BitGo temporarily disabling LayerZero OFT DVNs for Wrapped Bitcoin as a precaution. Despite the large loss, user funds remain secure, and a rapid-response blacklist prevented a second $100 million attack. The incident has renewed calls for implementing structural rate limits across DeFi protocols to enhance security.

Sentiment: 38% Bearish

A wave of protocol-level security responses followed the $292 million KelpDAO rsETH exploit on April 19, with BitGo, Polygon, and Katana moving swiftly to isolate potential contagion. The attack drained 116,500 rsETH from Kelp DAO’s LayerZero-powered cross-chain bridge through a forged message that bypassed its Decentralized Verifier Network (DVN) configuration. Protocols Move to Contain Fallout BitGo, alongside BiT Global Trust, took down the LayerZero OFT DVNs for Wrapped Bitcoin (WBTC) as a precaution. The firm confirmed that user funds remain secure and pledged to share updates as more information becomes available. In abundance of caution, BitGo, alongside @BiTGlobalTrust, have made the decision to take down the LayerZero OFT DVNs for @WrappedBTC until network-wide security and safety can be ascertained. User funds remain secure and updates will be shared as more information becomes…— BitGo (@BitGo) April 19, 2026 Polygon stated that its chain, Agglayer, and broader ecosystem remain unaffected by the incident. The network noted it has safely processed over $2 trillion to date. Katana paused the OFT path on Vaultbridge, which relied on a 2/3 DVN setup. Bridging through Agglayer, which verifies with zero-knowledge proofs rather than proof-of-authority multisigs, remained fully available. Meanwhile, Cyvers CTO and co-founder Meir Dolev revealed that KelpDAO was just three minutes away from losing an additional $100 million. A rapid-response blacklist blocked the attacker before a second attempt could succeed. Cyvers CTO and Co-Founder @Meir_Dv reveals: "@KelpDAO was just 3 minutes away from losing an additional $100M, saved only by a rapid-response blacklist that blocked the attacker before their second attempt." https://t.co/rRLgSTBZUX pic.twitter.com/JEd9p78Aot— 🚨 Cyvers Alerts 🚨 (@CyversAlerts) April 19, 2026 Industry Leaders Call for Structural Rate Limits The exploit has reignited calls for built-in rate limits across DeFi protocols. Ethena contributor Guy...

Comments