The recent $290 million exploit and subsequent $13 billion decline in DeFi's total value locked may seem catastrophic at first glance, but a more nuanced analysis suggests that the sector is far from broken. The KelpDAO exploit, which was linked to North Korea's Lazarus Group, highlighted the importance of robust infrastructure and security measures in DeFi.
While the incident did lead to a sharp repricing of risk, with Aave experiencing $8.45 billion in outflows over 48 hours, the actual net capital loss is likely to be a fraction of the headline figure. This is because much of the TVL drop was due to the unwinding of leveraged positions, which had been built up in response to a yield environment that was no longer justifying the risks associated with DeFi. The fact that DeFi has survived worse setbacks, including the collapse of Terra and the hacking of Wormhole and Ronin, suggests that the sector is more resilient than many critics claim.
According to 0xNGMI, founder of DefiLlama, the losses are significant but unlikely to be existential, and Aave has many resources to cover the loss, including its treasury and taking loans. The biggest issue will be the impact on risk premiums, which will likely increase as a result of the exploit.
However, this repricing of trust is not the same as collapse, and some deposits will return as conditions stabilize. There is also evidence of capital rotation within DeFi, with some protocols like Spark experiencing an increase in TVL.
The more interesting critique is that DeFi has become too timid, and builders need to focus on creating safer systems while continuing to offer real-world use cases. In conclusion, the KelpDAO exploit is not the end of DeFi, but rather a wake-up call for builders to innovate and improve the sector's resilience and appeal.