In the wake of a substantial $290 million exploit and a roughly $13 billion slide in DeFi's total value locked, it's easy to assume that decentralized finance is on the brink of collapse. However, this perspective may be overly simplistic. The recent KelpDAO exploit, which appears to have originated from a targeted attack on LayerZero's verification stack, has left many questioning the security of DeFi. Nevertheless, a closer examination of the data reveals a more complex narrative.
The exploit, linked to North Korea's Lazarus Group, was facilitated by Kelp's decision to opt for a single-verifier setup, despite recommendations to adopt a more resilient configuration. As a result, the liquid staking token rsETH was left unbacked, sparking concerns about potential bad debt in lending markets, particularly Aave's WETH pool. Despite the severity of the situation, DeFi has demonstrated remarkable resilience. The $8.45 billion in outflows from Aave and the broader DeFi TVL decline into the mid-$80 billion range can be seen as a rapid repricing of risk rather than a catastrophic collapse.
It's essential to consider that the $292 million theft does not directly correlate with the $13 billion decline, as a significant portion of the TVL was likely recycled collateral. The actual net capital loss may be a fraction of the reported figure, although isolating the exact amount is challenging due to the complex nature of DeFi's TVL calculations. The exploit has also highlighted the issue of leverage in DeFi, particularly in looping strategies where users deposit liquid restaking tokens, borrow ETH against them, swap for more restaking tokens, and repeat. This leverage can inflate TVL during periods of growth but unwinds sharply during events like the KelpDAO exploit.
The yield environment has also played a role in the buildup of leverage, as the risk premium that historically justified DeFi's complexity and smart contract exposure has largely disappeared. With organic yield insufficient, leverage has filled the gap, making the subsequent unwind more damaging.
Historical context is crucial in understanding the current state of DeFi. The sector has survived worse incidents, including the collapse of Terra, the Wormhole and Ronin exploits, and the Multichain unraveling.
The 'DeFi is dead' narrative is often trotted out after high-profile hacks, but the reality is that the sector has consistently demonstrated its ability to recover. More recently, Bybit suffered a significant theft but continued operating and restored reserves. The repricing of trust is a real and lasting cost, with capital demanding more compensation for participating in on-chain systems with expanded attack surfaces.
However, this repricing is not equivalent to collapse. Some deposits may not return, but historically, deposit outflows during stress events have reversed as conditions stabilize. There is also evidence of capital rotation within DeFi, with protocols like Spark experiencing increased TVL as users seek alternative options.
The more interesting critique is that DeFi has become too timid, with builders needing to create safer systems while continuing to offer real-world use cases. The KelpDAO exploit serves as a wake-up call for the industry, highlighting the need for innovation and resilience in the face of adversity.