DeFi’s Worst Day: KelpDAO Hack Sparks Chaos!

by

Ah, the KelpDAO exploit-because nothing says “I’m a financial genius” like siphoning unbacked rsETH tokens and depositing them into Aave. What could possibly go wrong? According to Cryptoquant, this was the DeFi equivalent of a toddler with a fire extinguisher, except the “fire” was liquidity, and the “extinguisher” was a 33% TVL drop.

Key Takeaways:

  • The KelpDAO exploit on April 18, 2026, exposed Aave to an estimated $124M-$230M in bad debt within 72 hours. Because nothing says “I’m a responsible financial institution” like accidentally funding a $230 million debt crisis.
  • Aave’s total value locked fell 33%, shedding billions, with USDT and USDC borrow rates hitting 14%. Because if you thought your mortgage was high, wait until you try borrowing stablecoins on Aave.
  • USDe supply shed $800 million in three days, signaling continued DeFi liquidity stress across major protocols. Because who needs liquidity when you can have a 14% interest rate?

KelpDAO rsETH Hack Triggers Multi-Billion-Dollar Liquidity Drain on Aave

According to Cryptoquant’s assessment of the situation, the attacker used the drained uncollateralized rsETH to exchange for WETH and stablecoins on Aave, exploiting a critical vulnerability in KelpDAO’s infrastructure. The attack quickly rippled across the broader DeFi ecosystem. Because nothing says “I’m a cybersecurity expert” like letting a hack spread like a virus in a digital petri dish.

Cryptoquant researchers found that Aave’s aETHrsETH contract holds approximately 83% of all rsETH circulating supply, making it the single most exposed protocol to the hack. The firm estimates Aave now carries between $124 million and $230 million in potential bad debt tied to depegged rsETH collateral. Because nothing says “I’m diversified” like holding 83% of a single token.

Aave’s total value locked (TVL) dropped massively in the 72 hours following the exploit, a 33% drop that Cryptoquant described as one of the sharpest protocol-level liquidity contractions in recent DeFi history. Because who needs liquidity when you can have a dramatic drop?

Borrowing rates across Aave’s three largest markets reflected the pressure immediately. Cryptoquant data shows USDT and USDC borrow rates on Aave V3 jumped from 3.4% to 14% as users rushed to borrow stablecoins and exit the protocol. Before the hack, those rates had held steady at 3.4%, consistent with normal DeFi lending conditions. Because if you can’t trust your DeFi protocol, where can you trust your money?

ETH borrowing rates on Aave V3 climbed to 8%, the highest reading Cryptoquant has recorded since at least January 2024. Rates later stabilized near 5%, still more than double the pre-hack level of 2%. Because if you thought the 2008 financial crisis was bad, wait until you see 2026.

The simultaneous rate spike across ETH, USDC, and USDT signals system-wide stress rather than isolated market movement, according to the Cryptoquant report. ETH, USDC, and USDT are Aave’s three largest markets by total value locked. Because nothing says “I’m a resilient system” like all your markets crashing at once.

Cryptoquant researchers described the dynamics as a classic DeFi liquidity crunch: depositors withdrawing while borrowers increase demand at the same time, leaving available liquidity to fall rapidly and interest rates to reset higher. As of the report date, rates remain elevated above pre-hack levels. Because if you can’t handle a liquidity crunch, maybe DeFi isn’t the place for you.

The yield-bearing stablecoin, USDe, the fourth-largest asset on Aave with $412 million in protocol deposits, also saw significant pressure. Cryptoquant tracked a net collapse in USDe minting activity in the days following the hack, driven by both contagion from the Aave crisis and persistently negative ETH and BTC perpetual futures funding rates. Because if you thought DeFi was a place for profit, you haven’t met the funding rates.

USDe’s total supply fell from $5.8 billion to $5 billion in three days, a decline of $800 million or 14%. Cryptoquant called it one of the largest short-term redemption events in USDe’s history. Because if you can’t afford a 14% drop, maybe you should invest in something less volatile, like a bag of chips.

As one of the largest stablecoins globally behind only USDT, USDC, USDS, and DAI, USDe’s contraction points to a meaningful withdrawal of liquidity from the broader DeFi ecosystem, the firm noted. Because if you’re not the biggest, you’re just another name in the crowd.

Negative perpetual funding rates compressed USDe’s delta-neutral yield during this period, accelerating redemption incentives for holders. Cryptoquant explained that the combination of hack-driven risk-off behavior and structural funding rate pressure marks a significant deterioration in DeFi market conditions. Because if you thought DeFi was a place for profit, you haven’t met the funding rates.

The latest Cryptoquant report highlights the systemic risk of concentrated collateral exposure in DeFi lending protocols, noting that Aave‘s outsized rsETH position amplified contagion far beyond the initial exploit. Because if you want to see a crisis, just concentrate your collateral in one place.

Read More

2026-04-24 02:30