Aave Faces $6 Billion Deposit Exodus Following Kelp Hack, Exposing DeFi Lender's Structural Vulnerability

Aave has experienced a significant exodus of deposits, with $6.6 billion withdrawn, not due to a direct hack on the platform, but rather as a result of a security breach in Kelp's bridge. The total value locked in Aave dropped from $26.4 billion to $20 billion, while the AAVE token price fell 16% to $92, and daily fees surged to $1.99 million amidst a wave of liquidations over the weekend. Depositors are fleeing due to Aave's exposure to a vulnerability it did not create, stemming from the theft of 116,500 rsETH from Kelp's bridge, which was then used as collateral to borrow wrapped ether on Aave V3. The Aave-specific borrow amounts to approximately $196 million, with total positions across Aave, Compound, and Euler reaching $236 million. As the largest lending protocol in DeFi, Aave allows users to deposit cryptocurrency to earn yield, while others borrow against collateral. However, the recent hack has highlighted the risks associated with accepting liquid restaking tokens as collateral, particularly when their backing can vanish due to exploits on external bridges. Aave's founder, Stani Kulechov, has stated that the protocol's contracts were not compromised, but the acceptance of liquid restaking tokens as collateral has left depositors vulnerable to losses. The incident has sparked concerns about the fragility of the DeFi system, with the AAVE token price now reflecting the market's assessment of whether the Umbrella reserve is sufficient to cover the potential losses and whether stkAAVE holders will bear the brunt of the deficit.