DeFi Sector Suffers $13 Billion Loss in 48 Hours Following KelpDAO Security Breach

A massive exodus of capital from the decentralized finance ecosystem has occurred in the wake of the KelpDAO protocol's recent security exploit. Over the past two days, leading DeFi lending platform Aave has witnessed a substantial decline of $8.45 billion in deposits, contributing to a broader $13.21 billion decrease in total value locked across DeFi. The total value locked, which represents the combined dollar value of crypto assets deposited across DeFi protocols, has fallen from $99.497 billion to $86.286 billion. Aave's total value locked has decreased by $8.45 billion to $17.947 billion over the same period, according to data from DefiLlama. Furthermore, protocol-level data reveals double-digit percentage declines across various platforms, including Euler, Sentora, and Aave, with the majority of losses concentrated in lending, restaking, and yield strategies tied to the affected collateral. The root cause of this decline stems from a $292 million exploit of Kelp's bridge, which allowed attackers to utilize stolen rsETH as collateral to borrow funds on lending platforms. Since these stolen tokens lacked legitimate collateral backing, borrowing against them created potential shortfalls for lenders, similar to deceiving a traditional bank by depositing fake fiat and taking out loans against it. In response, protocols have frozen affected markets, while panicked users have withdrawn funds, leading to a broad decline in total value locked. However, token prices have not moved as sharply as deposits, with the AAVE token experiencing a decline of approximately 2.5% over 24 hours, while UNI and LINK have decreased by less than 1% over the same period. According to Peter Chung, head of research at Presto Research, the incident highlights the risks associated with cross-chain infrastructure, particularly in verification systems used by bridges. Early analysis suggests that the issue may have originated in the verification layer rather than in the smart contracts themselves. Chung also noted that the episode demonstrates how interconnected DeFi protocols can transmit shocks beyond the initial point of failure, with withdrawal activity and market freezes extending to platforms without direct exposure to the exploit.