DeFi Shaken as Kelp DAO Hack Sparks $6B Withdrawal Panic on Aave

A major security breach linked to Kelp DAO has sent shockwaves through decentralized finance, triggering a liquidity crunch on Aave and prompting billions of dollars in withdrawals across the sector.

The incident, which saw approximately $291 million in crypto assets compromised, has quickly become one of the largest DeFi exploits of the year, exposing vulnerabilities in cross-chain infrastructure and amplifying concerns about systemic risk.

Exploit Disrupts Aave Markets

The breach originated from a cross-chain bridge built on infrastructure by LayerZero, which enables asset transfers between blockchain networks. Attackers exploited the system to access large amounts of rsETH, a liquid staking token issued by Kelp DAO.

Rather than directly cashing out the stolen tokens, the attackers used them as collateral on Aave to borrow other assets. This activity caused the utilization rate of a key lending pool to spike to 100%, effectively draining available liquidity.

As a result, users who had deposited Ethereum and related assets on Aave found themselves unable to withdraw funds, as the protocol temporarily ran out of available liquidity.

Emergency Measures and Market Reaction

In response, Aave moved to freeze markets tied to rsETH, while Kelp DAO suspended its contracts across Ethereum and several layer-2 networks as it began investigating the incident.

The fallout was immediate. Aave’s governance token dropped sharply, while Ethereum also saw modest losses amid broader market uncertainty.

At the same time, users rushed to secure their positions, further straining liquidity by borrowing stablecoins against existing deposits.

Billions in Withdrawals Signal Contagion Risk

The impact extended well beyond the affected platforms. Data from industry observers indicated that more than $6 billion in net withdrawals flowed out of Aave within hours of the exploit.

The wave of withdrawals was not limited to directly impacted protocols, suggesting that fear of contagion had spread across the DeFi ecosystem.

Analysts described these developments as “secondary effects,” where panic-driven activity compounds the initial shock, creating additional stress on liquidity and market stability.

Structural Weaknesses Exposed

Early assessments suggest the exploit may have been enabled by a flaw in the bridge’s messaging system, allowing attackers to generate a “phantom” transaction that released tokens without properly accounting for them on another network.

Such vulnerabilities highlight ongoing risks associated with cross-chain infrastructure, which remains a critical but complex component of decentralized finance.

Growing Scrutiny on DeFi Security

The incident has renewed debate over the resilience of DeFi systems, particularly as they grow in scale and interconnectedness. Critics argue that events like this underscore the risks of replacing traditional financial intermediaries with automated protocols.

At the same time, some industry figures have called for pragmatic responses, including attempts to negotiate with attackers or recover funds where possible.

A Test for DeFi’s Stability

Kelp DAO’s rsETH token plays a key role in Ethereum staking and restaking ecosystems, acting as a liquid representation of deposited assets. Its integration across multiple platforms illustrates how interconnected DeFi protocols have become.

The latest exploit demonstrates how vulnerabilities in one part of the system can rapidly cascade across others, affecting liquidity, user confidence, and market stability.