In the aftermath of a $290 million exploit and a $13 billion decline in DeFi's total value locked, it's easy to assume that decentralized finance is on the brink of collapse. However, this perspective overlooks the complexities of the situation. The KelpDAO exploit, which targeted LayerZero's verification stack, has been linked to North Korea's Lazarus Group and was facilitated by Kelp's decision to use a single-verifier setup despite recommendations to the contrary.
The resulting impact on rsETH, a liquid staking token, and the potential for bad debt to affect lending markets, particularly Aave's WETH pool, are significant concerns. Nevertheless, the fact that DeFi has endured similar challenges in the past and continues to operate is a testament to its resilience. The sharp decline in TVL can be attributed, in part, to a repricing of risk rather than a catastrophic failure of the system.
Aave, the largest DeFi lending market, experienced $8.45 billion in outflows over 48 hours, but much of this decline can be attributed to the unwinding of leveraged positions and the recycling of collateral. The actual net capital loss is likely a fraction of the reported $13 billion. The yield environment, which had become less favorable, also played a role in the buildup of leverage and the subsequent sharp decline.
Crypto has faced and overcome significant challenges in the past, including the collapse of Terra, the Wormhole and Ronin hacks, and the Multichain bridge theft. The 'DeFi is dead' narrative is often trotted out after high-profile exploits, but it overlooks the slower, less dramatic process of recovery. According to 0xNGMI, founder of DefiLlama, the losses are substantial but unlikely to be existential, and Aave has the resources to cover the loss.
The real cost will be the impact on risk premiums, as capital demands more compensation for the increased attack surface of on-chain systems. Still, this repricing is not equivalent to collapse, and some of the money will return as conditions stabilize.
There is evidence that capital is rotating within DeFi rather than leaving it entirely, with protocols like Spark experiencing an increase in TVL. The more pressing critique is that DeFi has become too cautious, offering low single-digit yields while expecting users to bear significant risks.
The Kelp exploit serves as a wake-up call for builders to create safer systems while providing real-world use cases, rather than signaling the demise of DeFi.