DeFi Sector Suffers $13 Billion Loss in 48 Hours Following KelpDAO Breach

A massive outflow of capital has hit the decentralized finance ecosystem after the KelpDAO protocol was exploited over the weekend. Major DeFi lending platform Aave has seen a staggering $8.45 billion withdrawal in deposits within the last 48 hours, contributing to a broader $13.21 billion decline in total value locked across the DeFi space. Total value locked, a key metric for measuring liquidity and market activity, plummeted from $99.497 billion to $86.286 billion. Aave's TVL alone dropped by $8.45 billion to $17.947 billion, according to DefiLlama. Protocol data reveals double-digit percentage drops across various platforms, including Euler, Sentora, and Aave, with the losses mainly concentrated in lending, restaking, and yield strategies tied to the affected collateral. The incident began with a $292 million exploit of Kelp's bridge, allowing attackers to utilize stolen rsETH, a widely used liquid re-staking token in DeFi, as collateral to borrow funds on lending platforms. As these stolen tokens lacked legitimate collateral backing, borrowing against them created potential shortfalls for lenders, similar to deceiving a traditional bank by depositing fake fiat and taking out loans against it. In response, protocols froze affected markets, while panicked users withdrew funds, resulting in a broad decline in total value locked. However, token prices have been less affected, with the AAVE token down approximately 2.5% over 24 hours, and UNI and LINK down less than 1% over the same period. Peter Chung, head of research at Presto Research, noted that the incident highlights the risks associated with cross-chain infrastructure, particularly in verification systems used by bridges. Initial analysis suggests that the issue may have originated in the verification layer rather than in the smart contracts themselves. Chung also pointed out that the episode demonstrates how interconnected DeFi protocols can transmit shocks beyond the initial point of failure, with withdrawal activity and market freezes extending to platforms without direct exposure to the exploit.