Aave’s TVL Dives $8B Following Massive Kelp DAO Breach
Key Takeaways:
- Aave’s TVL fell from $26.4 billion to $18.6 billion following a $293 million Kelp DAO exploit.
- The token’s value plunged 20% to $89.5 as a consequence of mass withdrawals.
- Aave’s stablecoin pools hit maximum utilization, locking up over $5.1 billion.
- The incident tests Aave’s “Umbrella” security model introduced in June 2025.
- Aave has frozen rsETH and wETH markets across several networks in response.
WEEX Crypto News, 2026-04-21 15:38:45
Impact of Kelp DAO Breach on Aave
In the wake of a staggering $293 million hack on Kelp DAO, Aave, a key player in DeFi, saw its Total Value Locked (TVL) plummet by $8 billion over the weekend. This drop elevated anxiety levels among investors and triggered substantial withdrawals, shrinking Aave’s stature as the largest DeFi protocol.
Details of the Exploit
Hackers exploited Kelp DAO’s LayerZero bridge to seize 116,500 Restaked ETH (rsETH), then used them for collateral on Aave v3’s platform to borrow wrapped Ether (wETH). This incursion left Aave staring at $195 million in bad debt and dropped the AAVE token’s price from $112 to $89.5 within just 25 hours.
Utilization of Stablecoin Pools
The attack led to Aave’s pools for USDt (USDT) and USDC (USDC) reaching their capacity, locking away more than $5.1 billion in stablecoins. This emphasizes how quickly a singular event can instigate widespread panic and restricted liquidity across interconnected DeFi networks.
Immediate Response by Aave
In light of the Kelp DAO scandal, Aave moved swiftly to freeze the rsETH markets on both Aave v3 and v4 platforms, aiming to thwart further suspicious activities. Moreover, reserves of wrapped Ether (wETH) were also frozen across Ethereum, Arbitrum, Base, Mantle, and Linea to prevent further damage.
Significance of Aave’s “Umbrella” Model
This incident marked the first significant test for Aave’s “Umbrella” security model, conceived in June 2025. This model serves to shield users from protocol bad debt, thereby protecting lenders while continuing to offer rewards. Aave argues that its system hinges on overcollateralization and automated liquidations to swing risks back to borrowers.
Protocols on Hold
In reaction to the breach, several protocols associated with rsETH and the LayerZero bridge have suspended their services. Notables include Curve Finance and BitGo’s Wrapped Bitcoin (WBTC), which are pausing usage until viable solutions re-establish confidence.
Before and After the Breach
Prior to the breach, Aave was flying high, avoiding bad debt through a strong reliance on collateral cushions and automated strategies, as highlighted in a recent Bank of Canada report. However, the breach has necessitated reassessments of its risk management procedures, as underscored by Aave’s recent decision to part ways with Chaos Labs, its trusted DeFi risk advisor, due to strategic and budgetary disagreements.
Conclusion
Aave’s recent challenges underscore the intricate tightrope that DeFi protocols must walk between incentive alignment and risk management. This latest incident acts as a stark reminder of the vulnerabilities lying within even the most seasoned DeFi ecosystems.
FAQs
What led to the sudden decrease in Aave’s TVL?
The drop in Aave’s TVL followed a $293 million exploit on Kelp DAO, where hackers leveraged rsETH as collateral on Aave, creating about $195 million in bad debt and catalyzing massive withdrawals.
How has Aave responded to the exploit in terms of market actions?
Aave has swiftly moved to freeze its rsETH and wETH markets to control potential further damage and suspicious activities, securing their reserves on multiple networks.
What is the “Umbrella” security model that Aave relies on?
Introduced in June 2025, Aave’s “Umbrella” security model is designed to automatically safeguard against protocol bad debt while enabling users to earn rewards through strategies like overcollateralization and automated liquidations.
Are there other protocols that paused operations due to the breach?
Yes, platforms like Curve Finance and the issuer of BitGo’s Wrapped Bitcoin (WBTC) have paused operations tied to the LayerZero bridge until the issues are fully resolved.
What prompted Aave to part ways with Chaos Labs?
Aave ended its collaboration with Chaos Labs due to differences in strategic direction for Aave v4 and pressing budgetary constraints.