A recent $292 million exploit on April 18 has tested the mettle of decentralized finance (DeFi), but according to investment bank Standard Chartered, the sector has shown it can withstand significant shocks. The hack, which affected KelpDAO and subsequently spilled over into AAVE, the largest DeFi lender, led to a sharp decline in liquidity, with deposits and active loans plummeting by 38% and 31%, respectively.
Despite this, the bank remains optimistic about the future of tokenized real-world assets, predicting they will reach a market cap of $2 trillion by the end of 2028. This growth will be driven by the continued expansion of DeFi lending and stablecoin liquidity. In a report, Geoff Kendrick, head of digital assets research at Standard Chartered, noted that the bank still expects tokenized real-world assets to reach a $2 trillion market cap by end-2028, up from $35 billion in October 2025. The recent hack underscores the persistent risks associated with crypto, including smart contract bugs, phishing, and cross-chain bridge flaws, which can expose large pools of locked assets to significant losses.
The complexity and interconnected nature of blockchain infrastructure amplify these risks, with cross-chain bridges, in particular, widening the attack surface and accounting for billions in losses due to intricate designs and weak validation. Repeated exploits can erode confidence across the ecosystem, pushing users and institutions to the sidelines and inviting tighter regulation, which can slow adoption and hinder growth. However, the swift response from AAVE and a coalition of DeFi firms, which committed over $300 million to stabilize the system, has helped to normalize conditions, with yields easing and deposits recovering.
The incident is also accelerating structural upgrades, including AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone, aimed at reducing reliance on cross-chain bridges, a frequent target in major crypto hacks. Wall Street bank JPMorgan has noted that hacks and stagnant capital levels in DeFi continue to weigh on the sector's institutional appeal, citing the $20 billion hit from the KelpDAO exploit as a significant concern.