Until April 17, lending stablecoins on Aave yielded 2.32% APY, despite the Federal Reserve's overnight rate being 3.64%. This discrepancy suggested that the market viewed unregulated, open-source smart contracts as lower credit risks than US Treasury bonds. However, this mispricing was corrected within 48 hours.
The hierarchy of dollar-credit options by yield prior to the incident defied logic, with Aave's stablecoin rates being significantly lower than those of other investment-grade assets. The market's repricing of DeFi credit risk was triggered by an exploit on Kelp DAO's cross-chain bridge, which allowed an attacker to mint unbacked tokens and borrow against them on Aave.
The resulting contagion led to a surge in borrowing rates and a decline in total DeFi TVL. The incident highlights the lack of bankruptcy laws and recourse mechanisms in DeFi protocols, making it essential for institutional allocators to reassess their exposure to DeFi. The market's adjustment of DeFi rates serves as a reminder that permissionless markets, although useful, are not risk-free and require a premium over regulated equivalents.