Until April 17, lending stablecoins on Aave yielded 2.32% APY, lower than the Federal Reserve's overnight rate of 3.64%. This mispricing implied that the market viewed an unregulated, open-source smart contract as a lower credit risk than the US Treasury.
However, this changed drastically over the next 48 hours. The market repriced DeFi credit risk, with Aave's stablecoin deposit APYs soaring from 3-6% to 13.4%. This sudden shift was triggered by an attacker exploiting Kelp DAO's cross-chain bridge, minting unbacked tokens and borrowing against non-existent collateral. The resulting contagion led to $6-10 billion in net outflows from Aave, causing depositors to be unable to withdraw and borrowers to struggle to access stablecoin liquidity.
The incident highlighted the lack of bankruptcy laws and recourse within DeFi protocols, emphasizing the need for institutional allocators to reassess their exposure to DeFi. The market's repricing of DeFi risk serves as a reminder that permissionless markets, although useful, are not risk-free and carry a premium over regulated equivalents.