Aave Sees $6 Billion Deposit Drop as Kelp Hack Exposes Structural Risk for DeFi Lender

Why It Matters

The incident highlights systemic risk in DeFi lending when unvetted, bridge‑dependent collateral is accepted, potentially eroding confidence in the sector’s largest protocol and its token holders.

Key Takeaways

• Aave lost $6.6 billion TVL after rsETH hack
• Attack used 116,500 rsETH (~$292 million) as collateral
• Ethereum loans hold $14.2 billion, 39.5% of Aave’s borrowing
• Umbrella reserve may cover loss; stkAAVE holders face risk
• Liquid restaking tokens now under heightened DeFi risk scrutiny

Pulse Analysis

The recent Kelp bridge breach sent shockwaves through the decentralized finance ecosystem, primarily because Aave, the market‑leading lender, inadvertently accepted the stolen rsETH as collateral. Attackers swapped the 116,500 rsETH—valued at roughly $292 million—for wrapped ether, creating a $196 million bad‑debt position that forced the protocol’s total value locked to tumble by $6.6 billion in a single weekend. While Aave’s smart contracts remained intact, the episode exposed a blind spot in its risk framework: reliance on external, bridge‑issued tokens whose underlying assets can evaporate without warning.

Beyond the immediate capital flight, the hack raises fundamental questions about the proliferation of liquid restaking tokens across DeFi. These assets, prized for their yield‑boosting properties, were widely whitelisted under the assumption they would retain peg value under normal market conditions. The Kelp exploit proved that a single bridge failure can nullify that assumption, leaving lenders with collateral that drops to zero. As a result, risk models are being revisited, with many platforms now demanding tighter on‑chain verification and diversified collateral pools to mitigate contagion risk.

Market reaction was swift: AAVE’s price slumped 16% to $92, and daily fees surged to $1.99 million as liquidations swept the system. The protocol’s Umbrella reserve, designed to absorb extreme losses, is now under scrutiny to determine if it can fully cover the deficit, putting stkAAVE holders at potential risk. The episode serves as a cautionary tale for the broader DeFi landscape, underscoring the need for robust cross‑chain security and more conservative collateral policies to preserve investor confidence.