$8 Billion Evaporates From Aave After $293M Kelp DAO Bridge Heist

The Aave protocol just experienced a brutal stress test. We watched total value locked (TVL) crater by nearly $8 billion over the weekend—a stunning 30% collapse that wiped roughly $195 million in bad debt onto the platform and sent the AAVE token plummeting nearly 20% from $112 to $89.5 in just 25 hours.

How the Exploit Triggered a Cascade

Here's what went down: Saturday saw hackers steal 116,500 rsETH (Restaked ETH) tokens worth approximately $293 million from Kelp DAO's LayerZero-powered bridge. They immediately dumped the stolen collateral onto Aave v3, borrowing wrapped Ether (wETH) against it. This brazen move created the bad debt nightmare that spooked the entire DeFi market.

Data from DeFiLlama tells the story. Aave's TVL collapsed from $26.4 billion to $18.6 billion by Sunday—enough to knock it off the pedestal as the largest DeFi protocol. Crypto analytics firm Lookonchain highlighted the panic: major players like MEXC exchange and Abraxas Capital withdrew $431 million and $392 million respectively. The hemorrhaging was real and immediate.

The Liquidity Crisis Nobody Wanted

We're now looking at a serious liquidity squeeze. Both USDT and USDC pools on Aave v3 hit 100% utilization, locking up over $5.1 billion in stablecoins. Users couldn't access their funds—only $2,540 was available to withdraw from the $2.87 billion USDT pool at the time. This is exactly the kind of contagion risk that keeps DeFi traders awake at night.

The LayerZero bridge incident sent shockwaves across the entire ecosystem. Curve Finance, Ethena, and BitGo's Wrapped Bitcoin all paused bridge usage until the threat cleared. Multiple protocols recognized the systemic risk and acted fast to contain it.

Aave's Response and the Bigger Picture

Aave moved quickly to freeze rsETH markets across v3 and v4, blocking suspicious borrowing patterns. They also froze WETH reserves on Ethereum, Arbitrum, Base, Mantle, and Linea. These were necessary circuit breaker moves, though they highlighted vulnerabilities in the interconnected DeFi lending market.

This incident serves as the first major real-world test of Aave's "Umbrella" security model, introduced in June 2025. The Bank of Canada recently noted that Aave v3 avoids bad debt through overcollateralization and automated liquidations—strategies that shift risk to borrowers. Aave defended its liquidation-based approach as a core safety mechanism protecting lenders.

The timing is notable: Aave parted ways with longtime risk provider Chaos Labs on April 6 amid disagreements over v4direction and budget constraints. Now the platform faces its biggest stability challenge in months without that partnership.

This wasn't just a Kelp DAO problem. It exposed how quickly contagion spreads when collateral quality deteriorates and panic selling takes hold.