Aave’s TVL Dives $8B Following Massive Kelp DAO Breach

By: crypto insight|2026/04/22 00:00:00
0
Share
copy

Key Takeaways:

  • Aave’s TVL fell from $26.4 billion to $18.6 billion following a $293 million Kelp DAO exploit.
  • The token’s value plunged 20% to $89.5 as a consequence of mass withdrawals.
  • Aave’s stablecoin pools hit maximum utilization, locking up over $5.1 billion.
  • The incident tests Aave’s “Umbrella” security model introduced in June 2025.
  • Aave has frozen rsETH and wETH markets across several networks in response.

WEEX Crypto News, 2026-04-21 15:38:45

Impact of Kelp DAO Breach on Aave

In the wake of a staggering $293 million hack on Kelp DAO, Aave, a key player in DeFi, saw its Total Value Locked (TVL) plummet by $8 billion over the weekend. This drop elevated anxiety levels among investors and triggered substantial withdrawals, shrinking Aave’s stature as the largest DeFi protocol.

Details of the Exploit

Hackers exploited Kelp DAO’s LayerZero bridge to seize 116,500 Restaked ETH (rsETH), then used them for collateral on Aave v3’s platform to borrow wrapped Ether (wETH). This incursion left Aave staring at $195 million in bad debt and dropped the AAVE token’s price from $112 to $89.5 within just 25 hours.

Utilization of Stablecoin Pools

The attack led to Aave’s pools for USDt (USDT) and USDC (USDC) reaching their capacity, locking away more than $5.1 billion in stablecoins. This emphasizes how quickly a singular event can instigate widespread panic and restricted liquidity across interconnected DeFi networks.

-- Price

--

Immediate Response by Aave

In light of the Kelp DAO scandal, Aave moved swiftly to freeze the rsETH markets on both Aave v3 and v4 platforms, aiming to thwart further suspicious activities. Moreover, reserves of wrapped Ether (wETH) were also frozen across Ethereum, Arbitrum, Base, Mantle, and Linea to prevent further damage.

Significance of Aave’s “Umbrella” Model

This incident marked the first significant test for Aave’s “Umbrella” security model, conceived in June 2025. This model serves to shield users from protocol bad debt, thereby protecting lenders while continuing to offer rewards. Aave argues that its system hinges on overcollateralization and automated liquidations to swing risks back to borrowers.

Protocols on Hold

In reaction to the breach, several protocols associated with rsETH and the LayerZero bridge have suspended their services. Notables include Curve Finance and BitGo’s Wrapped Bitcoin (WBTC), which are pausing usage until viable solutions re-establish confidence.

Before and After the Breach

Prior to the breach, Aave was flying high, avoiding bad debt through a strong reliance on collateral cushions and automated strategies, as highlighted in a recent Bank of Canada report. However, the breach has necessitated reassessments of its risk management procedures, as underscored by Aave’s recent decision to part ways with Chaos Labs, its trusted DeFi risk advisor, due to strategic and budgetary disagreements.

Conclusion

Aave’s recent challenges underscore the intricate tightrope that DeFi protocols must walk between incentive alignment and risk management. This latest incident acts as a stark reminder of the vulnerabilities lying within even the most seasoned DeFi ecosystems.

FAQs

What led to the sudden decrease in Aave’s TVL?

The drop in Aave’s TVL followed a $293 million exploit on Kelp DAO, where hackers leveraged rsETH as collateral on Aave, creating about $195 million in bad debt and catalyzing massive withdrawals.

How has Aave responded to the exploit in terms of market actions?

Aave has swiftly moved to freeze its rsETH and wETH markets to control potential further damage and suspicious activities, securing their reserves on multiple networks.

What is the “Umbrella” security model that Aave relies on?

Introduced in June 2025, Aave’s “Umbrella” security model is designed to automatically safeguard against protocol bad debt while enabling users to earn rewards through strategies like overcollateralization and automated liquidations.

Are there other protocols that paused operations due to the breach?

Yes, platforms like Curve Finance and the issuer of BitGo’s Wrapped Bitcoin (WBTC) have paused operations tied to the LayerZero bridge until the issues are fully resolved.

What prompted Aave to part ways with Chaos Labs?

Aave ended its collaboration with Chaos Labs due to differences in strategic direction for Aave v4 and pressing budgetary constraints.

You may also like

The arrival of the Web 3.0 era: A review of Hong Kong court rulings on digital assets

Hong Kong judiciary landmark: The court officially recognizes cryptocurrency as legal property and introduces the "tokenized injunction" to track and freeze involved funds, comprehensively upgrading the protection of digital asset investors.

Track Markets At a Glance: New WEEX Price Widgets for iOS & Android

To streamline your market data access, WEEX has officially launched "Market Watchlist" desktop widgets

The billion-dollar lesson: The focus of DeFi security is shifting from code to operational governance

Warning of nearly $1 billion loss in DeFi: Security pain points have shifted from code vulnerabilities to permissions and operations. Introducing TradFi bank-level risk control and AI defenses is the way to balance openness and security.

A Brief Analysis of Stablecoin Licenses and On-Chain Funding

Hong Kong accelerates the layout of digital finance, providing a panoramic analysis of the evolution of three major on-chain financial forms: central bank digital currency, deposit tokens, and stablecoins, along with future opportunities.

BVNK Founder: Three Stages of Stablecoin Development

Once payments become faster, cheaper, and globally interconnected, stablecoins will not just open up a new market, but a new realm with boundaries that are not yet visible today.

The truth about Trump's son's Bitcoin game: he made a staggering $100 million while retail investors lost $500 million

The Trump family has a family skill: to exaggerate and make something sound bigger than it actually is.

Popular coins

Latest Crypto News

Read more
iconiconiconiconiconiconicon
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com