The decentralized finance sector has shown its capacity to withstand significant disruptions, as evidenced by its response to a $292 million cyber attack on April 18, which highlighted inherent systemic vulnerabilities, according to a report by Standard Chartered. The breach of KelpDAO had a ripple effect on AAVE, the largest DeFi lending platform, as stolen tokens were utilized as collateral to secure additional assets, triggering a sharp liquidity crisis.
This led to a substantial decline in deposits and active loans, reminiscent of a bank run scenario. Notwithstanding this incident, the bank anticipates that tokenized real-world assets will reach a market capitalization of $2 trillion by the end of 2028, driven by sustained growth in DeFi lending and stablecoin liquidity. As stated by Geoff Kendrick, the head of digital assets research at Standard Chartered, 'We maintain our projection that tokenized real-world assets will attain a market capitalization of $2 trillion by the end of 2028, representing a significant increase from the $35 billion recorded in October 2025.' The persistence of hacking and exploitation risks in the crypto sphere continues to undermine trust in systems that rely on code rather than intermediaries. Vulnerabilities in smart contracts, phishing, and cross-chain bridge flaws can expose substantial pools of locked assets, where a single weak point can result in disproportionate losses.
The complexity and interconnected nature of blockchain infrastructure amplify these risks. Cross-chain bridges, while expanding functionality, also increase the attack surface and have been responsible for significant losses due to intricate designs, shared systems, and, in some cases, weak validation.
Repeated exploits can erode confidence across the ecosystem, causing users and institutions to adopt a cautious approach, inviting stricter regulation, and slowing adoption, thereby making security a key constraint on the growth of crypto. In response to the incident, AAVE and a coalition of DeFi firms swiftly committed over $300 million to stabilize the system, according to the report.
This intervention helped normalize conditions, with yields easing and deposits recovering. The bank noted that the incident is accelerating structural upgrades, such as AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone, aimed at reducing reliance on cross-chain bridges, a frequent target in major crypto hacks. Wall Street bank JPMorgan highlighted that persistent security flaws and stagnant capital levels in decentralized finance continue to hinder DeFi's appeal to institutions, as evidenced by the $20 billion impact of the KelpDAO exploit.