Aave’s TVL Dives $8B Following Massive Kelp DAO Breach
Key Takeaways:
- Aave’s TVL fell from $26.4 billion to $18.6 billion following a $293 million Kelp DAO exploit.
- The token’s value plunged 20% to $89.5 as a consequence of mass withdrawals.
- Aave’s stablecoin pools hit maximum utilization, locking up over $5.1 billion.
- The incident tests Aave’s “Umbrella” security model introduced in June 2025.
- Aave has frozen rsETH and wETH markets across several networks in response.
WEEX Crypto News, 2026-04-21 15:38:45
Impact of Kelp DAO Breach on Aave
In the wake of a staggering $293 million hack on Kelp DAO, Aave, a key player in DeFi, saw its Total Value Locked (TVL) plummet by $8 billion over the weekend. This drop elevated anxiety levels among investors and triggered substantial withdrawals, shrinking Aave’s stature as the largest DeFi protocol.
Details of the Exploit
Hackers exploited Kelp DAO’s LayerZero bridge to seize 116,500 Restaked ETH (rsETH), then used them for collateral on Aave v3’s platform to borrow wrapped Ether (wETH). This incursion left Aave staring at $195 million in bad debt and dropped the AAVE token’s price from $112 to $89.5 within just 25 hours.
Utilization of Stablecoin Pools
The attack led to Aave’s pools for USDt (USDT) and USDC (USDC) reaching their capacity, locking away more than $5.1 billion in stablecoins. This emphasizes how quickly a singular event can instigate widespread panic and restricted liquidity across interconnected DeFi networks.
Immediate Response by Aave
In light of the Kelp DAO scandal, Aave moved swiftly to freeze the rsETH markets on both Aave v3 and v4 platforms, aiming to thwart further suspicious activities. Moreover, reserves of wrapped Ether (wETH) were also frozen across Ethereum, Arbitrum, Base, Mantle, and Linea to prevent further damage.
Significance of Aave’s “Umbrella” Model
This incident marked the first significant test for Aave’s “Umbrella” security model, conceived in June 2025. This model serves to shield users from protocol bad debt, thereby protecting lenders while continuing to offer rewards. Aave argues that its system hinges on overcollateralization and automated liquidations to swing risks back to borrowers.
Protocols on Hold
In reaction to the breach, several protocols associated with rsETH and the LayerZero bridge have suspended their services. Notables include Curve Finance and BitGo’s Wrapped Bitcoin (WBTC), which are pausing usage until viable solutions re-establish confidence.
Before and After the Breach
Prior to the breach, Aave was flying high, avoiding bad debt through a strong reliance on collateral cushions and automated strategies, as highlighted in a recent Bank of Canada report. However, the breach has necessitated reassessments of its risk management procedures, as underscored by Aave’s recent decision to part ways with Chaos Labs, its trusted DeFi risk advisor, due to strategic and budgetary disagreements.
Conclusion
Aave’s recent challenges underscore the intricate tightrope that DeFi protocols must walk between incentive alignment and risk management. This latest incident acts as a stark reminder of the vulnerabilities lying within even the most seasoned DeFi ecosystems.
FAQs
What led to the sudden decrease in Aave’s TVL?
The drop in Aave’s TVL followed a $293 million exploit on Kelp DAO, where hackers leveraged rsETH as collateral on Aave, creating about $195 million in bad debt and catalyzing massive withdrawals.
How has Aave responded to the exploit in terms of market actions?
Aave has swiftly moved to freeze its rsETH and wETH markets to control potential further damage and suspicious activities, securing their reserves on multiple networks.
What is the “Umbrella” security model that Aave relies on?
Introduced in June 2025, Aave’s “Umbrella” security model is designed to automatically safeguard against protocol bad debt while enabling users to earn rewards through strategies like overcollateralization and automated liquidations.
Are there other protocols that paused operations due to the breach?
Yes, platforms like Curve Finance and the issuer of BitGo’s Wrapped Bitcoin (WBTC) have paused operations tied to the LayerZero bridge until the issues are fully resolved.
What prompted Aave to part ways with Chaos Labs?
Aave ended its collaboration with Chaos Labs due to differences in strategic direction for Aave v4 and pressing budgetary constraints.
You may also like

Dialogue with OmenX Founder: Why does the prediction market need an evolution from "spot" to "derivatives"?

When the P2P illicit funds from ten years ago turned into 60,000 bitcoins

Morning News | CME Group launches Nasdaq Cryptocurrency Index futures; Asset management giant Janus Henderson strategically invests in Ethena

Why did Oracle deliver the strongest financial report in history, yet its stock price fell?

Bitcoin Layer 2 Network Botanix: Why Did We Choose to Dissolve?

Morning Report | OpenAI has submitted an S-1 registration statement draft to the U.S. SEC; Morpho completes $175 million financing

Galaxy Deep Research Report: How Hyperliquid's HIP-4 Upgrade Changes the Landscape of Prediction Markets?

Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI

Deconstructing Anthropic: The Best AI Company, Possibly Also a Type of Organizational Invention

Every exchange is a "Universal Exchange."

The counterattack of traditional finance: Alliance chains are quietly reviving

Pantera Capital Partner: How Tokenization is Restructuring the Private Equity and Early Investment Ecosystem?

Mastercard Launches Agent Pay for AI, Plans to Record AI Agent Payment Authorizations on Polygon
Mastercard launched Agent Pay for AI, a new payment protocol designed to help AI agents make small payments such as pay-per-use access to data and APIs. The system plans to record human-granted AI agent permissions on Polygon, focusing on verifiable authorization, identity, and payment controls.

Curve Deploys Llamalend v2 on Optimism With 250,000 OP Incentives
Curve launched Llamalend v2 on Optimism with 250,000 OP incentives from the Optimism Foundation. The upgrade expands Llamalend beyond its earlier crvUSD-focused model, adding broader collateral support, LlamaRisk market reviews, and the ability to use Curve LP tokens as collateral.

Raydium Old Liquidity Pool Reportedly Exploited, With $1.34 Million Moved to Ethereum and Tornado Cash
An old Raydium liquidity pool was reportedly exploited for around $1.34 million in USDC, RAY, and wSOL, with the stolen funds bridged to Ethereum and deposited into Tornado Cash. The incident highlights the tail risks of legacy DeFi pools, old contracts, and cross-chain fund laundering paths.

Kalshi Executive Challenges “SBF Backed AI Unicorns” Narrative, Says Leopold Aschenbrenner Was Key Figure
Kalshi executive John Wang questioned the “SBF backed AI unicorns” narrative, saying Leopold Aschenbrenner was the key figure behind major AI investment decisions.

New York Proposes Stricter Stablecoin Issuer Rules Aligned With Federal GENIUS Act
NYDFS proposed stricter stablecoin issuer rules aligned with the GENIUS Act, covering reserves, custody, redemption timelines, audits, and capital buffers.

CryptoQuant Says Bitcoin Profitable Supply Is Near 45% Pressure Zone as On-Chain Data Points to Market Repricing
CryptoQuant said Bitcoin’s profitable supply is nearing the 45% pressure zone, signaling rising market stress, unrealized losses, and a possible on-chain repricing phase.
