A recent $292 million exploit on April 18 has left the decentralized finance sector reeling, but according to Standard Chartered, it remains "bent, not broken". The attack, which targeted KelpDAO and subsequently affected AAVE, the largest DeFi lender, highlighted systemic vulnerabilities. Stolen tokens were used as collateral to borrow other assets, triggering a sharp liquidity crunch. Despite this, the sector is expected to reach a $2 trillion market cap for tokenized real-world assets by the end of 2028, driven by growth in DeFi lending and stablecoin liquidity.
The bank's head of digital assets research, Geoff Kendrick, stated, "We still project that tokenised real-world assets will reach a market cap of $2 trillion by end-2028, up from $35 billion in October 2025". Hacks and exploits continue to pose significant risks to the crypto ecosystem, undermining trust and exposing large pools of assets to potential losses.
The complexity of blockchain infrastructure amplifies these risks, with cross-chain bridges being a frequent target. Repeated exploits can erode confidence, pushing users and institutions away, and slowing adoption.
In response to the hack, AAVE and other DeFi firms committed over $300 million to stabilize the system, which helped normalize conditions. The incident has accelerated structural upgrades, including AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone, aimed at reducing reliance on cross-chain bridges. According to Wall Street bank JPMorgan, persistent security flaws continue to hinder DeFi's institutional appeal, with the KelpDAO exploit resulting in a $20 billion loss.