Intro
On April 18, 2026, attackers drained $292 million from Kelp DAO's rsETH bridge in what became the largest DeFi exploit of the year. Within days, stolen funds began flowing through privacy protocols — THORChain, Umbra, Chainflip — prompting Umbra to shut down its own frontend to curb further laundering.