DeFi Suffers $13 Billion Loss in 48 Hours Following KelpDAO Breach

A massive exodus of capital from the decentralized finance ecosystem has occurred in the wake of the KelpDAO protocol's weekend exploit. Over the past 48 hours, Aave, a leading DeFi lending platform, has seen a substantial decline of $8.45 billion in deposits, contributing to a broader $13.21 billion decrease in total value locked across DeFi. This downturn is reflected in the drop in total value locked from $99.497 billion to $86.286 billion, with Aave's TVL declining by $8.45 billion to $17.947 billion, according to DefiLlama. Protocol-level data reveals double-digit percentage drops across various platforms, including Euler, Sentora, and Aave, with the majority of losses concentrated in lending, restaking, and yield strategies tied to the affected collateral. The root cause of this decline stems from a $292 million exploit of Kelp's bridge, which allowed attackers to use stolen rsETH as collateral to borrow funds on lending platforms, creating potential shortfalls for lenders due to the lack of legitimate collateral backing. In response, protocols have frozen affected markets, while panicked users have withdrawn funds, resulting in a broad decline in total value locked. Notably, token prices have not declined as sharply as deposits, with the AAVE token experiencing a 2.5% decline over 24 hours, while UNI and LINK have seen less than a 1% decline over the same period, according to CoinDesk market data. Peter Chung, head of research at Presto Research, has highlighted the risks associated with cross-chain infrastructure, particularly in verification systems used by bridges, and notes that the episode demonstrates how interconnected DeFi protocols can transmit shocks beyond the initial point of failure, with withdrawal activity and market freezes extending to platforms without direct exposure to the exploit.