Aave Faces Potential Losses of Up to $230 Million Following Kelp DAO Bridge Exploit

A recent exploit of the Kelp DAO and LayerZero bridge has put lending protocol Aave at risk of significant losses, potentially up to $230 million. The incident occurred when an attacker manipulated the bridge mechanism, creating unauthorized tokens without backing, and then used these tokens as collateral to borrow approximately $190 million in ETH and related assets from Aave. In response, Aave moved quickly to mitigate the risk by freezing rsETH markets and halting new borrowing. The extent of the losses will depend on how Kelp DAO allocates the shortfall, with two possible outcomes: a 15% depegging of rsETH if losses are spread across all holders, resulting in around $124 million in bad debt for Aave, or a more severe impact of up to $230 million in bad debt if losses are confined to Layer 2 networks. The exploit has highlighted the risks associated with interconnected DeFi infrastructure and the importance of robust validation mechanisms for cross-chain transactions.