DeFi Suffers $13 Billion Loss in 48 Hours Following KelpDAO Breach

A massive exodus of capital is underway in the decentralized finance ecosystem, triggered by the recent exploit of the KelpDAO protocol over the weekend. Aave, a leading DeFi lending platform, has seen a substantial $8.45 billion decrease in deposits within the past 48 hours, contributing to a broader $13.21 billion decline in total value locked across DeFi. Total value locked, which measures the combined dollar value of crypto assets deposited in DeFi protocols, has fallen from $99.497 billion to $86.286 billion, while Aave's TVL has dropped by $8.45 billion to $17.947 billion, according to data from DefiLlama. Protocol-level data reveals double-digit percentage drops in TVL across several platforms, including Euler, Sentora, and Aave, with the majority of losses concentrated in lending, restaking, and yield strategies tied to the affected collateral. The exploit, which involved a $292 million breach of Kelp's bridge, allowed attackers to utilize stolen rsETH as collateral to borrow funds on lending platforms. As these stolen tokens lacked legitimate collateral backing, borrowing against them created potential shortfalls for lenders, similar to deceiving a traditional bank by depositing fake fiat and taking out loans against it. In response, protocols have frozen affected markets, while panicked users have withdrawn funds, resulting in a broad decline in total value locked. However, token prices have seen less significant fluctuations, with the AAVE token experiencing a 2.5% decline over 24 hours, and UNI and LINK declining by less than 1% over the same period, according to CoinDesk market data. Peter Chung, head of research at Presto Research, noted that the incident highlights the risks associated with cross-chain infrastructure, particularly in verification systems used by bridges. Preliminary analysis suggests that the issue may have originated in the verification layer rather than in the smart contracts themselves. Chung also added that the episode demonstrates how interconnected DeFi protocols can transmit shocks beyond the initial point of failure, with withdrawal activity and market freezes extending to platforms without direct exposure to the exploit.