Aave Faces Potential Losses of Up to $230 Million Following Kelp DAO Bridge Exploit

A recent exploit of the Kelp DAO and LayerZero bridge has put Aave at risk of losing up to $230 million, with the actual impact dependent on Kelp DAO's allocation of the shortfall. The incident involved an attacker manipulating the bridge mechanism to create unauthorized tokens, which were then used as collateral to borrow approximately $190 million in assets from Aave. To mitigate the risk, Aave promptly froze rsETH markets and halted new borrowing against the asset. The outcome now hinges on Kelp DAO's handling of the shortfall, with potential losses ranging from $124 million if spread across all rsETH holders to $230 million if confined to Layer 2 networks. The exploit has raised concerns about the security of interconnected DeFi infrastructure and has led to a significant withdrawal of total value locked from Aave, totaling around $6 billion.