Aave’s TVL Dives $8B Following Massive Kelp DAO Breach
Key Takeaways:
- Aave’s TVL fell from $26.4 billion to $18.6 billion following a $293 million Kelp DAO exploit.
- The token’s value plunged 20% to $89.5 as a consequence of mass withdrawals.
- Aave’s stablecoin pools hit maximum utilization, locking up over $5.1 billion.
- The incident tests Aave’s “Umbrella” security model introduced in June 2025.
- Aave has frozen rsETH and wETH markets across several networks in response.
WEEX Crypto News, 2026-04-21 15:38:45
Impact of Kelp DAO Breach on Aave
In the wake of a staggering $293 million hack on Kelp DAO, Aave, a key player in DeFi, saw its Total Value Locked (TVL) plummet by $8 billion over the weekend. This drop elevated anxiety levels among investors and triggered substantial withdrawals, shrinking Aave’s stature as the largest DeFi protocol.
Details of the Exploit
Hackers exploited Kelp DAO’s LayerZero bridge to seize 116,500 Restaked ETH (rsETH), then used them for collateral on Aave v3’s platform to borrow wrapped Ether (wETH). This incursion left Aave staring at $195 million in bad debt and dropped the AAVE token’s price from $112 to $89.5 within just 25 hours.
Utilization of Stablecoin Pools
The attack led to Aave’s pools for USDt (USDT) and USDC (USDC) reaching their capacity, locking away more than $5.1 billion in stablecoins. This emphasizes how quickly a singular event can instigate widespread panic and restricted liquidity across interconnected DeFi networks.
Immediate Response by Aave
In light of the Kelp DAO scandal, Aave moved swiftly to freeze the rsETH markets on both Aave v3 and v4 platforms, aiming to thwart further suspicious activities. Moreover, reserves of wrapped Ether (wETH) were also frozen across Ethereum, Arbitrum, Base, Mantle, and Linea to prevent further damage.
Significance of Aave’s “Umbrella” Model
This incident marked the first significant test for Aave’s “Umbrella” security model, conceived in June 2025. This model serves to shield users from protocol bad debt, thereby protecting lenders while continuing to offer rewards. Aave argues that its system hinges on overcollateralization and automated liquidations to swing risks back to borrowers.
Protocols on Hold
In reaction to the breach, several protocols associated with rsETH and the LayerZero bridge have suspended their services. Notables include Curve Finance and BitGo’s Wrapped Bitcoin (WBTC), which are pausing usage until viable solutions re-establish confidence.
Before and After the Breach
Prior to the breach, Aave was flying high, avoiding bad debt through a strong reliance on collateral cushions and automated strategies, as highlighted in a recent Bank of Canada report. However, the breach has necessitated reassessments of its risk management procedures, as underscored by Aave’s recent decision to part ways with Chaos Labs, its trusted DeFi risk advisor, due to strategic and budgetary disagreements.
Conclusion
Aave’s recent challenges underscore the intricate tightrope that DeFi protocols must walk between incentive alignment and risk management. This latest incident acts as a stark reminder of the vulnerabilities lying within even the most seasoned DeFi ecosystems.
FAQs
What led to the sudden decrease in Aave’s TVL?
The drop in Aave’s TVL followed a $293 million exploit on Kelp DAO, where hackers leveraged rsETH as collateral on Aave, creating about $195 million in bad debt and catalyzing massive withdrawals.
How has Aave responded to the exploit in terms of market actions?
Aave has swiftly moved to freeze its rsETH and wETH markets to control potential further damage and suspicious activities, securing their reserves on multiple networks.
What is the “Umbrella” security model that Aave relies on?
Introduced in June 2025, Aave’s “Umbrella” security model is designed to automatically safeguard against protocol bad debt while enabling users to earn rewards through strategies like overcollateralization and automated liquidations.
Are there other protocols that paused operations due to the breach?
Yes, platforms like Curve Finance and the issuer of BitGo’s Wrapped Bitcoin (WBTC) have paused operations tied to the LayerZero bridge until the issues are fully resolved.
What prompted Aave to part ways with Chaos Labs?
Aave ended its collaboration with Chaos Labs due to differences in strategic direction for Aave v4 and pressing budgetary constraints.
You may also like

US Law Firm Issues Apology Over AI-Caused Legal Filing Errors
Key Takeaways: Sullivan & Cromwell admitted to submitting a court filing with around 40 incorrect citations caused by…

Mozilla Employs Anthropic AI to Detect 271 Firefox Vulnerabilities
Key Takeaways: Mozilla’s internal test with Anthropic’s Claude Mythos AI found 271 vulnerabilities in Firefox, all patched this…

DeFi Losses Top $600 Million Amid Kelp DAO Exploit and TVL Decline
Key Takeaways: Total DeFi losses have skyrocketed to approximately $1 billion recently, with $600M+ linked directly to the…

SEC’s “Innovation Exemption” Sets New Rails for Tokenized Securities
Key Takeaways: SEC Chair Paul Atkins introduces an “innovation exemption” to regulate tokenized securities. A five-category token framework…

Ripple to Handle Settlements with XRP; SWIFT Continues Messaging Role
Key Takeaways: Ripple focuses on settlement via XRP, while SWIFT handles messaging. The integration of blockchain doesn’t require…

Analyst Predicts Future Wealth for XRP Holders Post-Retracement Confirmation
Key Takeaways: Crypto analyst JD remains bullish on XRP’s macro chart structure despite recent market retracement. Confirmation of…

Breaking: Crypto Investor Tim Cook Steps Down as Apple CEO
Key Takeaways: Tim Cook will transition from CEO to Executive Chairman on September 1, 2026. John Ternus, a…

Meta Rolls Out Employee Monitoring for AI Development
Key Takeaways: Meta has initiated employee monitoring to enhance AI models. A focus on AI-driven operations supports the…

Brian Armstrong Endorses Groundbreaking Satoshi Documentary
Key Takeaways: Brian Armstrong praises the latest documentary on Satoshi as the most insightful yet. The film results…

Charles Hoskinson Criticizes Bitcoin’s Approach to Post-Quantum Security
Key Takeaways: Bitcoin’s selection of SPHINCS+ for post-quantum security faces scrutiny from Charles Hoskinson. SPHINCS+, while secure, increases…

UK Fintech Stratiphy Reopens Tax-Free Crypto ETNs Through IF ISAs
Key Takeaways: Stratiphy now offers UK investors tax-free crypto ETNs via Innovative Finance (IF) ISAs. Recent policies restrict…

BlackRock Injects $900 Million into Bitcoin amid Soaring ETF Demand
Key Takeaways: BlackRock invested over $900 million in Bitcoin within five days, according to Arkham Intelligence. The firm…

HBAR and XLM Leading the Charge as Bitcoin Nears $76,000
Key Takeaways: HBAR and XLM topped CoinDesk 20 with significant gains, contrasting with the general market trend. HBAR’s…

Aave TVL Plummets $15 Billion Post-KelpDAO Hack – Future Prospects for AAVE Price?
Key Takeaways: Aave saw a drastic $15.1 billion withdrawal following the KelpDAO hack, nearly a third of its…

Stratiphy Reopens Tax-Free Crypto ETNs for UK Investors
Key Takeaways: Stratiphy reintroduces tax-free access to crypto ETNs in the UK, reversing limitations imposed by HMRC’s ISA…

Uzbekistan Launches Tax-Free Crypto Mining Zone in Karakalpakstan
Key Takeaways: Uzbekistan has initiated the “Besqala Mining Valley” in Karakalpakstan, offering a supervised zone for crypto mining…

Volo DeFi Faces $3.5M Security Breach: A Close Look
Key Takeaways: Volo Protocol suffers a $3.5 million exploit in specific vaults on the Sui blockchain. Immediate steps…

US Admiral Views Bitcoin as a Tool for US Power Projection
Key Takeaways: Bitcoin’s proof-of-work is praised for cybersecurity by US Navy Admiral Samuel Paparo. The technology imposes higher…
US Law Firm Issues Apology Over AI-Caused Legal Filing Errors
Key Takeaways: Sullivan & Cromwell admitted to submitting a court filing with around 40 incorrect citations caused by…
Mozilla Employs Anthropic AI to Detect 271 Firefox Vulnerabilities
Key Takeaways: Mozilla’s internal test with Anthropic’s Claude Mythos AI found 271 vulnerabilities in Firefox, all patched this…
DeFi Losses Top $600 Million Amid Kelp DAO Exploit and TVL Decline
Key Takeaways: Total DeFi losses have skyrocketed to approximately $1 billion recently, with $600M+ linked directly to the…
SEC’s “Innovation Exemption” Sets New Rails for Tokenized Securities
Key Takeaways: SEC Chair Paul Atkins introduces an “innovation exemption” to regulate tokenized securities. A five-category token framework…
Ripple to Handle Settlements with XRP; SWIFT Continues Messaging Role
Key Takeaways: Ripple focuses on settlement via XRP, while SWIFT handles messaging. The integration of blockchain doesn’t require…
Analyst Predicts Future Wealth for XRP Holders Post-Retracement Confirmation
Key Takeaways: Crypto analyst JD remains bullish on XRP’s macro chart structure despite recent market retracement. Confirmation of…
