Until April 17, lending stablecoins on Aave yielded 2.32% APY, lower than the Federal Reserve's overnight rate of 3.64%. This discrepancy suggested the market viewed unregulated, open-source smart contracts as lower credit risks than US Treasury bonds.
However, this changed dramatically over 48 hours, as the market repriced DeFi credit risk in real-time. The mispricing was evident when ranking dollar-credit options by yield before last weekend; the hierarchy did not make sense, with Treasury overnight rates at 3.64%, Ledn's investment-grade Bitcoin-backed ABS senior tranche at 6.84%, and Aave at 2.32%. The market correction was prompted by an attacker exploiting Kelp DAO's cross-chain bridge, minting unbacked tokens and borrowing $190-230 million in real assets against non-existent collateral.
This incident led to instant contagion, with $6-10 billion in net outflows from Aave, utilization hitting 100% on WETH, USDT, and USDC pools, and depositors unable to withdraw. Rates responded with Aave stablecoin deposit APYs jumping from 3-6% to 13.4% within two days. The incident highlights the lack of bankruptcy law within DeFi protocols, leaving no recourse for users and emphasizing the need for institutional allocators to reassess DeFi exposure.
DeFi is not risk-free and carries a premium over regulated equivalents. The market's adjustment serves as a reminder that permissionless markets, although useful, are not without risk.