Aave, the most important lending platform in decentralized finance (DeFi), suffered one in all its sharpest setbacks in years after a $292 million exploit on the restaking venture Kelp DAO uncovered cracks in how collateral strikes throughout chains.
Attackers struck on April 18, draining 116,500 rsETH by way of a vulnerability in Kelp’s LayerZero-powered bridge. They cast cross-chain messages, then rushed the stolen, now-unbacked tokens onto Aave V3 as collateral to borrow wETH.
The outcome: roughly $196 million in unhealthy debt that Aave can’t simply liquidate. The protocol swiftly froze rsETH markets and linked pairs to cease additional harm.
The response was swift and brutal. In 48 hours, depositors pulled greater than $8.45 billion from Aave. Its whole worth locked crashed from about $26.4 billion pre-hack to as little as $15.84 billion, in line with DeFiLlama—a roughly one-third drop that briefly value Aave its place as the most important DeFi protocol by TVL.
The ache didn’t cease at Aave’s doorways. Whole DeFi TVL slid from $99.5 billion to roughly $85.72 billion in the identical two-day span, erasing greater than $13 billion in locked capital. Different lenders felt the warmth: Morpho shed about $1.7 billion in deposits, Sky misplaced roughly $600 million, and platforms together with SparkLend, Fluid, Euler and Sentora posted double-digit proportion declines or froze rsETH publicity as a precaution.
Furthermore, liquidity swimming pools for wETH, USDT and USDC on Aave hit 100% utilization at factors, briefly locking customers out of withdrawals and spiking liquidations. On the time of publishing, roughly 65% of wETH stays borrowed ($5.61 billion of $8.65 billion) whereas its utilization seeing sharp spikes prior to now few days.

The episode laid naked dangers which have grown with liquid restaking tokens. rsETH had been deployed throughout dozens of platforms and greater than 20 chains, creating dense layers of rehypothecation. When one bridge failed, concern rippled outward.
Following the protocol’s tumbling place, its native AAVE token fell as a lot as 26% earlier than a partial rebound, whereas day by day charges on the protocol jumped on heightened buying and selling exercise.
Aave’s governance and danger groups now face robust calls on absorbing the unhealthy debt shortfall. Its insurance coverage fund affords solely partial cowl, leaving open whether or not the DAO treasury or stkAAVE holders will shoulder losses. Kelp DAO has paused rsETH contracts network-wide whereas it weighs the right way to allocate the hit.
For a protocol lengthy considered as a cornerstone of DeFi lending, the velocity of the outflow served as a warning: even battle-tested code can buckle when unbacked collateral from exterior finds its approach in. As markets stabilize close to the $15.6–18 billion vary for Aave, members are taking a tougher take a look at bridge safety and collateral focus throughout the broader ecosystem.
Additionally learn: Justin Sun Sues Trump-Backed World Liberty Financial for Fraud and Token Seizure





