DeFi Protocols Launch Joint Escape Hatch for Aave Lenders Following Kelp DAO Exploit Contagion

Apr 21, 2026

An attacker exploited KelpDAO's cross-chain bridge on Saturday, draining approximately 116,500 rsETH worth $292 million by pushing a fraudulent message through a one-of-one verifier configuration on the LayerZero route linking Unichain to Ethereum mainnet. The stolen rsETH was deposited as collateral on Aave, which issued 106,467 ETH against it before oracles adjusted, creating $236 million in bad-debt exposure and triggering mass withdrawals that dropped Aave's TVL from $26 billion to $20 billion. The contagion spread across DeFi as total sector TVL fell 10% from $99 billion to $89 billion, prompting eight protocols to freeze rsETH markets while industry leaders proposed rate limits on asset deposits to prevent future exploits from being rapidly monetized through lending platforms. KelpDAO's emergency multisig froze core contracts, blocking two additional attack attempts worth $100 million, but the initial funds had already moved through Tornado Cash.

KelpDAO bridge exploit and attack mechanics

▪The stolen rsETH tokens from KelpDAO were worth approximately $292 million at the time of the exploit.
▪The KelpDAO exploit stands as the largest DeFi exploit of 2026.

Aave's bad debt exposure and liquidity crisis

▪Aave's total value locked dropped from more than $26 billion to about $20 billion as users withdrew funds.
▪TRON founder Justin Sun withdrew more than 65,580 ETH, worth about $154 million, from Aave in a single transaction.
▪Aave's ETH utilization rate reached 100%, leaving all available Ether on the platform either borrowed or withdrawn.

Contagion across DeFi protocols and market-wide withdrawals

▪The KelpDAO incident triggered a $10 billion drop across the DeFi sector according to 0xngmi, the pseudonymous founder of DeFiLlama.
▪The KelpDAO exploit drained roughly $10 billion across the DeFi industry over the weekend.
▪Total value locked for DeFi protocols dropped 10% from around $99 billion on April 18 to $89 billion.

Proposed solutions for limiting bridge exploit damage

▪Under Keone Hon's proposed model, an asset with a current circulating supply of $100 million and a formal cap of $300 million would not be allowed to jump straight to the full cap in a single burst.