A recent cyber attack on April 18, resulting in a $292 million loss, has put decentralized finance (DeFi) to the test, yet it has shown its ability to withstand significant challenges, according to Standard Chartered. The attack, which targeted KelpDAO and subsequently affected AAVE, the largest DeFi lender, led to a sharp decline in liquidity, with deposits decreasing by approximately 38% and active loans by 31%, creating a bank-run-like scenario. Despite this, the market for tokenized real-world assets is still expected to reach $2 trillion by the end of 2028, driven by the continued expansion of DeFi lending and stablecoin liquidity.

Standard Chartered's head of digital assets research, Geoff Kendrick, stated, "We still anticipate that tokenized real-world assets will reach a market capitalization of $2 trillion by the end of 2028, representing a significant increase from the $35 billion recorded in October 2025." The prevalence of hacks and exploits remains a major concern in the crypto space, undermining trust in systems that rely on code rather than intermediaries. The complexity and interconnected nature of blockchain infrastructure amplify these risks, with cross-chain bridges, in particular, expanding the potential attack surface and contributing to significant losses due to their intricate designs and shared systems. Repeated exploits can erode confidence across the ecosystem, pushing users and institutions to the sidelines, inviting stricter regulation, and slowing adoption, making security a crucial factor in crypto's growth.

In response to the incident, AAVE and a coalition of DeFi firms have committed over $300 million to stabilize the system, which has helped to normalize conditions, with yields easing and deposits recovering. The bank noted that the incident is accelerating structural upgrades, including AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone, aimed at reducing reliance on cross-chain bridges, a frequent target in major crypto hacks. According to Wall Street bank JPMorgan, persistent security flaws and stagnant capital levels in DeFi continue to hinder its appeal to institutions, as highlighted by the $20 billion impact of the KelpDAO exploit.