Aave Faces Potential Losses of Up to $230 Million Following Kelp DAO Bridge Exploit

A recent exploit of the Kelp DAO and LayerZero bridge has put Aave, a lending protocol, at risk of incurring significant losses, potentially up to $230 million. The incident involved an attacker forging a transfer message, effectively creating new tokens without backing, and then using them as collateral to borrow approximately $190 million in ETH and related assets. In response, Aave quickly froze rsETH markets and halted new borrowing against the asset. The extent of the losses will depend on how Kelp DAO handles the shortfall, with possible outcomes including a 15% depegging of the rsETH token, resulting in around $124 million in bad debt, or a more severe impact of up to $230 million if losses are isolated to Layer 2 networks. The exploit has raised concerns about the security of interconnected DeFi infrastructure and has led to a significant withdrawal of total value locked from Aave, with around $6 billion being withdrawn following the incident.