The recent $290 million exploit and the subsequent $13 billion decline in DeFi's total value locked may seem like a catastrophic blow to the industry. However, this perspective overlooks the fact that DeFi has withstood similar challenges in the past and continues to evolve. The exploit, which targeted KelpDAO's infrastructure, highlights the importance of robust security measures and the need for protocols to prioritize risk management.
The significant outflows from Aave, with $8.45 billion withdrawn in just 48 hours, demonstrate the rapid repricing of risk in the market. Nevertheless, this does not necessarily signify the demise of DeFi.
Instead, it may be a sign of the sector's ability to adapt and recover from setbacks. The fact that DeFi's total value locked has returned to levels similar to those seen around the same time last year suggests that the industry is resilient.
Aave's exposure to rsETH, a liquid staking token issued by KelpDAO, was a significant factor in the protocol's TVL decline. However, much of this exposure was due to leveraged positions and looping strategies, which can inflate TVL calculations. The actual net capital loss is likely a fraction of the reported $13 billion figure.
The yield environment, which had become less favorable in recent months, also contributed to the leverage buildup and subsequent unwind. Data from DefiLlama shows that reETH balances on Aave had grown rapidly leading up to the exploit, reaching nearly 580,000 tokens, or $1.3 billion.
This leverage made the subsequent contagion more damaging. The crypto industry has survived worse incidents, including the collapse of Terra, the Wormhole and Ronin hacks, and the Multichain bridge exploit.
Bybit, for example, suffered a massive theft of around $1.5 billion but continued to operate and process withdrawals. The repricing of trust in DeFi may lead to higher risk premiums, but this does not necessarily mean the sector is doomed.
0xNGMI, founder of DefiLlama, believes that Aave has the resources to cover its losses and that the biggest issue will be the impact on risk premiums. While some deposits may not return, historical data suggests that outflows during stress events often reverse as conditions stabilize. There is also evidence of capital rotation within DeFi, with protocols like Spark experiencing increased TVL as users seek safer alternatives.
The more interesting critique is that DeFi has become too timid, offering low yields for high-risk investments. The Kelp exploit may serve as a wake-up call for builders to create safer systems while continuing to offer real-world use cases.