The DeFi sector has shown its capacity for resilience in the face of adversity, following a significant $292 million hack on April 18 that highlighted systemic vulnerabilities, according to a report by Standard Chartered. The hack, which targeted KelpDAO and subsequently affected AAVE, the largest DeFi lender, led to a sharp decline in liquidity, with deposits and active loans dropping by 38% and 31%, respectively, in a scenario likened to a bank run. Despite this setback, the bank remains optimistic about the future of tokenized real-world assets, predicting they will reach a market capitalization of $2 trillion by the end of 2028, driven by growth in DeFi lending and stablecoin liquidity.
In the report, Geoff Kendrick, head of digital assets research at Standard Chartered, reiterated the bank's projection that tokenized real-world assets will achieve a $2 trillion market cap by end-2028, representing a substantial increase from $35 billion in October 2025. The crypto sector continues to grapple with the risks of hacks and exploits, which can undermine trust in code-based systems and expose vast amounts of locked assets to significant losses due to single vulnerabilities. The complexity and interconnectedness of blockchain infrastructure amplify these risks, with cross-chain bridges, in particular, widening the attack surface and contributing to substantial losses due to their intricate designs and, in some cases, weak validation mechanisms. Repeated exploits can erode confidence, pushing users and institutions away, inviting stricter regulation, and slowing the adoption of crypto, making security a critical constraint on its growth.
In response to the hack, AAVE and a coalition of DeFi firms swiftly committed over $300 million to stabilize the system, which, according to the report, helped normalize conditions, with yields easing and deposits recovering. The incident is also accelerating structural upgrades, such as AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone, aimed at reducing reliance on cross-chain bridges, a frequent target in major crypto hacks.
Meanwhile, Wall Street bank JPMorgan noted that persistent security flaws and stagnant capital levels in DeFi continue to deter institutional investment, citing the $20 billion impact of the KelpDAO exploit as a significant example.