A recent $292 million exploit on April 18 has not deterred the decentralized finance (DeFi) sector, with investment bank Standard Chartered describing it as 'resilient' in the face of systemic risks. The hack, which targeted KelpDAO and subsequently affected AAVE, the largest DeFi lender, led to a significant liquidity crisis. This resulted in a 38% decrease in deposits and a 31% drop in active loans, mirroring a bank-run scenario. However, despite this setback, the bank remains optimistic about the growth of tokenized real-world assets, predicting they will reach a $2 trillion market capitalization by the end of 2028.
This projection is driven by the continued expansion of DeFi lending and stablecoin liquidity. According to Geoff Kendrick, head of digital assets research at Standard Chartered, 'tokenised real-world assets (RWAs) are expected to reach a market cap of $2 trillion by end-2028, up from $35 billion in October 2025.' The threat of hacks and exploits persists as a major risk in the crypto space, undermining trust in systems that rely on code rather than intermediaries. Smart contract vulnerabilities, phishing, and cross-chain bridge flaws can expose substantial pools of locked assets, where a single weak point can trigger significant losses.
The complexity and interconnected nature of blockchain infrastructure amplify these risks. Cross-chain bridges, while enhancing functionality, also increase the attack surface and have been responsible for billions of dollars in losses due to intricate designs, shared systems, and weak validation.
Repeated exploits can erode confidence across the ecosystem, potentially pushing users and institutions to the sidelines, inviting stricter regulation, and slowing adoption, thereby making security a crucial constraint on crypto's growth. In response to the hack, AAVE and a coalition of DeFi firms swiftly committed over $300 million to stabilize the system.
According to the report, this intervention helped normalize conditions, with yields easing and deposits recovering. The incident has also accelerated structural upgrades, including AAVE's V4 upgrade and the forthcoming Ethereum Economic Zone, aimed at reducing reliance on cross-chain bridges, a frequent target in major crypto hacks.
Meanwhile, Wall Street bank JPMorgan noted that persistent security flaws and stagnant capital levels in DeFi continue to hinder its institutional appeal, highlighted by the $20 billion impact of the KelpDAO exploit.