DeFi Suffers $13 Billion Loss in 48 Hours Following KelpDAO Exploit

A major downturn has hit the decentralized finance sector after a significant exploit of the KelpDAO protocol over the weekend. Key lending platform Aave has experienced a substantial loss of $8.45 billion in deposits within the last 48 hours, contributing to a broader decline of $13.21 billion in total value locked across DeFi platforms. Total value locked, a metric used to gauge liquidity and market activity by measuring the combined value of crypto assets deposited across DeFi protocols, fell from $99.497 billion to $86.286 billion. Aave's total value locked decreased by $8.45 billion to $17.947 billion during the same period, according to data from DefiLlama. Several platforms, including Euler, Sentora, and Aave, have reported double-digit percentage drops, with the majority of losses concentrated in lending, restaking, and yield strategies tied to the affected collateral. The decline stems from a $292 million exploit of Kelp's bridge, which allowed attackers to misuse stolen rsETH, a widely used liquid re-staking token in DeFi, as collateral for borrowing on lending platforms. Since these stolen tokens lacked legitimate collateral backing, borrowing against them posed potential shortfalls for lenders, similar to depositing fake funds in a traditional bank and taking out loans against them, ultimately resulting in bad debt for the lender. In response, protocols have frozen affected markets, while panicked users have withdrawn funds, leading to a broad decline in total value locked. However, token prices have been less affected, with AAVE down approximately 2.5% over 24 hours and UNI and LINK down less than 1% over the same period, according to CoinDesk market data. Peter Chung, head of research at Presto Research, noted that the incident highlights risks in cross-chain infrastructure, particularly in the verification systems used by bridges. Early analysis suggests the issue may have originated in the verification layer rather than the smart contracts themselves. Chung also pointed out that the episode demonstrates how interconnected DeFi protocols can transmit shocks beyond the initial point of failure, with withdrawal activity and market freezes extending to platforms without direct exposure to the exploit.