DeFi Suffers $13 Billion Loss in 48 Hours Following KelpDAO Breach

A significant withdrawal of capital is currently underway in the decentralized finance ecosystem, triggered by the recent exploitation of the KelpDAO protocol over the weekend. In the past 48 hours, Aave, a leading DeFi lending platform, has seen a substantial decline of $8.45 billion in deposits. This has contributed to a broader decline of $13.21 billion in total value locked across DeFi, which measures the combined dollar value of crypto assets deposited in DeFi protocols and serves as an indicator of liquidity and market activity. According to DefiLlama, the total value locked in DeFi has dropped from $99.497 billion to $86.286 billion, while Aave's TVL has decreased by $8.45 billion to $17.947 billion. Protocol-level data indicates double-digit percentage declines across various platforms, including Euler, Sentora, and Aave, with the losses primarily concentrated in lending, restaking, and yield strategies tied to the affected collateral. The exploit, which involved a $292 million breach of Kelp's bridge, allowed attackers to misuse stolen rsETH, a widely used liquid re-staking token in DeFi, as collateral for borrowing funds on lending platforms. As a result, protocols have frozen affected markets, and users have withdrawn funds, leading to a decline in total value locked. In contrast, token prices have seen a relatively limited decline, with the AAVE token down approximately 2.5% over 24 hours, and UNI and LINK down less than 1% over the same period. According to Peter Chung, head of research at Presto Research, the incident highlights the risks associated with cross-chain infrastructure, particularly in verification systems used by bridges, and demonstrates how interconnected DeFi protocols can transmit shocks beyond the initial point of failure.