DeFi Losses Top $600 Million Amid Kelp DAO Exploit and TVL Decline
Key Takeaways:
- Total DeFi losses have skyrocketed to approximately $1 billion recently, with $600M+ linked directly to the Kelp DAO exploit.
- The exploit involved minting 116,500 unbacked rsETH by manipulating LayerZero’s verifier, without breaching smart contracts.
- A $13 billion exodus led to DeFi’s tvl-7532">total value locked (TVL) hitting a one-year low soon after the event.
- Aave, SparkLend, and Fluid froze rsETH markets, with Aave’s TVL dropping by about $8.4 billion.
- North Korea’s Lazarus Group, notably its TraderTraitor subunit, is suspected to be behind the attack, yet formal confirmation is pending.
WEEX Crypto News, 2026-04-22 12:04:54
Kelp DAO Exploit and DeFi’s Structural Vulnerability
The Kelp DAO incident on April 18, 2026, laid bare vulnerabilities in DeFi infrastructure, resulting in over $600 million in losses. These losses stemmed from a targeted attack that minted 116,500 unbacked rsETH due to a compromised LayerZero verifier node. Security firm Halborn had previously highlighted this single-point architectural weakness, forewarning what has now become a cautionary tale of structural oversight.
How It Happened
In a high-stakes maneuver, the Lazarus Group—a subdivision dubbed TraderTraitor—leveraged compromised RPC nodes to carry out a DDoS attack, thereby executing a fake message that conjured the uncollateralized rsETH. The fact that no novel smart contract vulnerabilities were exploited underscores the issue: known misconfigurations were ignored.
[Place Image: Demonstration of Kelp DAO exploit via LayerZero verifier]
This flawed setup, documented and previously flagged, turned internal security oversights into a significant exploit. Attackers rapidly converted rsETH into ETH and Arbitrum, using Tornado Cash for further transactions to obscure origin trails.
Unprecedented Capital Flight and TVL Plunge
DeFi’s TVL had been dwindling due to macroeconomic pressures. However, the Kelp DAO exploit rapidly escalated the situation, triggering a $13 billion capital flight within just 48 hours, according to DefiLlama. This bleached market liquidity, blindsiding even those protocols not directly linked to rsETH like Compound, which still faced withdrawal spasms.
Aave, profoundly affected, witnessed its TVL drop from $26.4 billion to roughly $18 billion—a dramatic $8.45 billion fall, mainly as a protective measure against crystallizing bad debts tied to faulty rsETH collateral.
[Place Image: Chart showing Aave’s TVL decline]
Future Scenarios
Two paths emerge from here. If Kelp DAO issues a credible forensic report along with a restitution strategy, and if Aave manages to rectify its rsETH exposure, the contagion could stabilize. On the contrary, further delays in LayerZero’s security overhaul could trigger another wave of withdrawals, forcing yield hunters to pivot to more secure yet interconnected ecosystems.
On the Frontline: Security and Recovery Measures
LayerZero’s naming of the Lazarus Group provides some directional insight into responsibility, yet formal affirmation is essential. Meanwhile, the DeFi community anxiously awaits comprehensive reports from both Kelp DAO and Aave. These reports will be pivotal in gauging immediate recovery prospects and long-term resilience.
The vulnerability exposed—relying on a 1-of-1 verifier—is far from unique to Kelp. Other protocols running similar frameworks must heed these warnings. An industry-wide reassessment of architectural robustness is inevitable if future misplaced trust is to be avoided.
Ripple Effects and Governance Token Dynamics
Governance tokens feel the ripple effects too. AAVE, for instance, dipped over 20% post-exploit, primarily driven by users’ de-risking maneuvers reflecting a shaky confidence in asset-backed lending.
[Place Image: Governance token valuation trends post-exploit]
This uncharted terrain poses questions about possible protocol adaptations. Will platforms adopt multi-layered verifier structures, or are cross-chain networks fundamentally vulnerable? As stakeholders dwell on these questions, they remain wary of any incidents that might precipitate a similar exodus.
FAQ
What triggered the Kelp DAO exploit?
The exploit was triggered by a vulnerable single-point verifier node under LayerZero, compromised through RPC node hijacking, resulting in unbacked rsETH minting.
How much of the rsETH was uncollateralized during the exploit?
116,500 rsETH was minted without collateral through the exploit, roughly 18% of the circulating supply.
What was the extent of DeFi’s TVL reduction post-exploit?
DeFi TVL suffered a $13 billion reduction within 48 hours of the exploit, hitting a one-year low.
Which protocols took major hits following the exploit?
Aave, SparkLend, and Fluid froze their rsETH markets, with Aave’s TVL falling by $8.45 billion.
Who is suspected to have orchestrated the Kelp DAO attack?
The Lazarus Group, specifically its TraderTraitor subunit from North Korea, is suspected, but formal confirmation is awaited.
You may also like

Pantera Capital Partner: How Tokenization is Restructuring the Private Equity and Early Investment Ecosystem?

New York Proposes Stricter Stablecoin Issuer Rules Aligned With Federal GENIUS Act
NYDFS proposed stricter stablecoin issuer rules aligned with the GENIUS Act, covering reserves, custody, redemption timelines, audits, and capital buffers.

Every exchange is a "Universal Exchange."

The counterattack of traditional finance: Alliance chains are quietly reviving

CryptoQuant Says Bitcoin Profitable Supply Is Near 45% Pressure Zone as On-Chain Data Points to Market Repricing
CryptoQuant said Bitcoin’s profitable supply is nearing the 45% pressure zone, signaling rising market stress, unrealized losses, and a possible on-chain repricing phase.

Bitcoin Falls Below 200-Week Moving Average as On-Chain Data Shows Over Half of Supply in Loss
Bitcoin dropped below its 200-week moving average as on-chain data showed over 50% of circulating supply is now in loss, signaling rising market stress.

CFTC Reportedly Plans New Prediction Market Rules Focused on Manipulation Risk and Public Interest Review
The CFTC is reportedly preparing new prediction market rules focused on manipulation risk, public interest review, and retail trader protections.

Meet the new WEEX trial fund—your gateway to greater profits

WEEX Labs Lands at Dutch Blockchain Week: A Disruptive Crypto × AI Conversation Sets Sail in Amsterdam

SK Hynix Reportedly Plans U.S. ADR Listing as Early as August, With SEC Approval Possible in Late June
SK Hynix may pursue a U.S. ADR listing as early as August, with SEC approval reportedly possible in late June amid strong AI chip supply chain demand.

SpaceX vs Tesla vs xAI: Which Elon Musk Trade Has the Biggest Upside in 2026?

OpenAI Reveals It Has Confidentially Submitted an S-1 to the SEC, Keeping the Door Open for a Future IPO
On June 9, according to an OpenAI announcement, the company recently confidentially submitted a draft S-1 registration statement to the U.S. Securities and Exchange Commission (SEC), beginning the preliminary compliance process for a potential initial public offering. OpenAI said it chose to disclose this proactively because it expected the news might leak; however, the company has not yet set a specific listing timeline, and related arrangements may still take some time.

Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI

Deconstructing Anthropic: The Best AI Company, Possibly Also a Type of Organizational Invention

Apollo and Blackstone Reportedly Back $35 Billion Anthropic Chip Financing as Deal Details Remain Unclear
On June 9, according to currently available news alerts, Apollo and Blackstone Group participated in a $35 billion financing for an Anthropic “chip project.” Based on the original wording of the report, the funding has already been raised, but public information remains limited. The financing structure, use of proceeds, project entity, and whether Apollo and Blackstone participated through equity, debt, or project financing have not yet been disclosed.

Humanity Protocol Security Incident Escalates: More Than $31 Million Stolen From Related Addresses as Attacker Continues Selling H for ETH
On June 9, according to monitoring by Onchain Lens, more than $31 million has been stolen from addresses linked to Humanity Protocol, and the attack is still ongoing, with the hacker continuously swapping H tokens for ETH. Project founder Terence Kwok later confirmed the security incident on X, saying the issue involved a private key leak.

Bloomberg: As Bitcoin Weakens, Stablecoins and RWA Continue to Drive Expansion in Crypto Businesses
In June, Bloomberg reported that despite Bitcoin falling below $60,000 last week, wiping out about $235 billion in market value within seven days, and dropping close to 50% from last year’s peak, some core businesses in the crypto industry are still expanding, mainly in stablecoins, real-world asset tokenization (RWA), payments, and infrastructure. The report also noted that overall altcoin activity has contracted significantly: altcoin market capitalization has fallen from a peak of about $431 billion in November 2021 to around $170 billion, and among the tens of millions of tokens issued in recent years, fewer than 1,700 still maintain meaningful trading activity.

Galaxy Deep Research Report: How Hyperliquid's HIP-4 Upgrade Changes the Landscape of Prediction Markets?
Pantera Capital Partner: How Tokenization is Restructuring the Private Equity and Early Investment Ecosystem?
New York Proposes Stricter Stablecoin Issuer Rules Aligned With Federal GENIUS Act
NYDFS proposed stricter stablecoin issuer rules aligned with the GENIUS Act, covering reserves, custody, redemption timelines, audits, and capital buffers.
Every exchange is a "Universal Exchange."
The counterattack of traditional finance: Alliance chains are quietly reviving
CryptoQuant Says Bitcoin Profitable Supply Is Near 45% Pressure Zone as On-Chain Data Points to Market Repricing
CryptoQuant said Bitcoin’s profitable supply is nearing the 45% pressure zone, signaling rising market stress, unrealized losses, and a possible on-chain repricing phase.
Bitcoin Falls Below 200-Week Moving Average as On-Chain Data Shows Over Half of Supply in Loss
Bitcoin dropped below its 200-week moving average as on-chain data showed over 50% of circulating supply is now in loss, signaling rising market stress.
