Aave Sees $300 Million Surge in Borrowing as KelpDAO Exploit Triggers Liquidity Crisis

The aftermath of the KelpDAO exploit has led to a significant spike in borrowing on Aave, with users taking out approximately $300 million in loans against their USDT deposits in the first 24 hours following the attack, according to data from Chaos Labs. This surge in borrowing is not a sign of increased demand, but rather a desperate attempt by users to access liquidity as stablecoin pools have become maxed out. Depositors are being forced to take out loans against their own funds at a loss, simply to gain access to their own money. This phenomenon can be likened to a bank refusing to process customer withdrawal requests, prompting customers to take out loans on their deposits out of desperation. The head of strategy at Spark, a rival DeFi lending platform, noted that the borrowing surge is a negative secondary effect of the illiquidity in Aave's stablecoin markets, stating that users are unable to withdraw due to 100% utilization, resulting in a $300 million increase in borrowing with USDT collateral. To understand how the KelpDAO exploit led to this liquidity crisis on Aave, it's essential to comprehend how the system is designed to work and where it failed. Aave is a decentralized finance protocol that allows users to lend and borrow cryptocurrencies without intermediaries, operating on a public blockchain with no human gatekeepers. Users deposit assets into lending pools and earn interest, while others borrow from these pools by posting crypto assets as collateral. The system is designed to self-correct through interest rates, but it relies on the core assumption that there is always sufficient liquidity for lenders to withdraw their deposits and for borrowers to unwind their positions. The KelpDAO exploit, which involved the manipulation of the protocol's bridge infrastructure to release 116,500 rsETH tokens, worth approximately $292 million, has broken this assumption. These fake tokens were deposited into lending protocols, mostly Aave, to borrow real ETH and other assets, causing a chain reaction that led to the $300 million borrowing surge. Aave froze rsETH markets on V3 and V4, stopping the bleeding but also triggering the liquidity crisis. The exploit news prompted whales and big funds to withdraw billions of dollars worth of cryptocurrencies from Aave's liquidity pools, draining the pools and causing utilization rates to rise to 100%. This led to a situation where every lending pool held a fixed amount of assets deposited by users, but every dollar of those assets had been borrowed out, leaving nothing for withdrawals. Trapped USDT and USDC depositors, unable to withdraw their money, began borrowing against their locked deposits, accepting significant losses, simply to extract any liquidity from the system. This desperate act of borrowing against their own money at a loss has reduced liquidity in other markets, with USDC and USDe markets now at 100% utilization. The incident highlights the risks associated with decentralized finance, demonstrating that 'decentralized' does not mean 'without risk'.