A recent $292 million exploit on April 18 has put decentralized finance (DeFi) to the test, but it has emerged 'shaken, not shattered', according to a report by Standard Chartered. The KelpDAO breach, which spilled over into AAVE, the largest DeFi lender, after stolen tokens were used as collateral for borrowing other assets, triggered a sharp liquidity crisis. This resulted in a 38% decline in deposits and a 31% decrease in active loans, characterized by the bank as a 'bank-run dynamic'.
Despite this setback, the bank still expects tokenized real-world assets to reach a $2 trillion market cap by the end of 2028, driven by sustained growth in DeFi lending and stablecoin liquidity. In a report released on Wednesday, Geoff Kendrick, head of digital assets research at Standard Chartered, stated, 'We still project that tokenized real-world assets will reach a market cap of $2 trillion by the end of 2028, up from $35 billion in October 2025.' Hacks and exploits continue to pose significant risks in the crypto space, eroding trust in systems that rely on code rather than intermediaries. Bugs in smart contracts, phishing, and vulnerabilities in cross-chain bridges can expose large pools of locked assets, where a single weak point can trigger substantial losses.
The complexity and interconnected nature of blockchain infrastructure amplify these risks. Cross-chain bridges, while expanding functionality, also increase the attack surface and have been responsible for billions of dollars in losses due to intricate designs, shared systems, and, in some cases, weak validation.
Repeated exploits can erode confidence across the ecosystem, pushing users and institutions to the sidelines, inviting stricter regulation, and slowing adoption, making security a key constraint on crypto's growth. In response to the crisis, AAVE and a coalition of DeFi firms swiftly committed over $300 million to stabilize the system. According to the report, the intervention helped normalize conditions, with yields easing and deposits recovering.
The bank noted that the incident is accelerating structural upgrades, with AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone aiming to reduce reliance on cross-chain bridges, a frequent target in major crypto hacks. Wall Street bank JPMorgan highlighted that hacks and stagnant capital levels in DeFi continue to hinder its institutional appeal, citing the $20 billion impact of the KelpDAO exploit.