Until April 17, lending stablecoins via Aave yielded 2.32% APY, below the Federal Reserve's overnight rate of 3.64%, implying an unregulated smart contract was deemed lower risk than US Treasury. This disparity was rectified within 48 hours.
The mispricing was evident when ranking dollar-credit options by yield, with Aave's rate being significantly lower than others, such as Treasury overnight, Ledn's investment-grade Bitcoin-backed ABS, and US credit cards. This anomaly suggested either DeFi had solved credit risk or the market had stopped pricing it. The latter was proven correct after an attacker exploited Kelp DAO's cross-chain bridge, minting unbacked rsETH tokens and borrowing $190-230 million in real assets against non-existent collateral.
Aave's incident report acknowledged the protocol functioned as designed, but the shortfall was structural. The contagion was instant, with $6-10 billion in net outflows leaving Aave within 48 hours, causing utilization on WETH, USDT, and USDC pools to hit 100%. Depositors couldn't withdraw, and borrowers couldn't source stablecoin liquidity. Rates responded accordingly, with Aave stablecoin deposit APYs increasing from 3-6% to 13.4% within two days.
The lack of bankruptcy law within DeFi protocols means there is no recourse for users, emphasizing the need for institutional allocators to reassess their exposure. DeFi is not risk-free and carries a premium over regulated equivalents.
The market's adjustment serves as a reminder of the importance of accurately pricing risk.