The attackers carried out the substitution of messages through compromised RPC-nodes and DDoS attacks.
A critical factor in the incident was the Kelp DAO architecture, which contained a single point of failure (diagram 1/1~DVN), which allowed the rigged transaction to pass without proper verification.
The event had a significant impact on the financial market: rsETH assets were frozen on the Aave platform, and the volume of outflows exceeded $ 10 billion. A number of decentralized finance (DeFi) protocols have temporarily suspended bridges, raising concerns about vulnerabilities in the interconnection infrastructure.