Kelp DAO Exploit Sparks Aave Liquidity Crunch, $6.2 Billion Withdrawal Panic

Decrypt04-19 19:12

In brief Aave users struggled to withdraw funds from Aave after attackers borrowed with stolen rsETH on the platform, spiking a core market’s so-called utilization rate. The funds were plundered from ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2628934207?lang=en_US&edition=fundamental","thumbnail":"https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2025/11/aave-decrypt-style-01-gID_7.jpg@webp","is_english":true,"pubTime":"2026-04-19 19:12","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2628934207","market":"nz","top_or_hot":-1,"title":"Kelp DAO Exploit Sparks Aave Liquidity Crunch, $6.2 Billion Withdrawal Panic","media":"Decrypt","content":"<div>\n<p>In brief\nAave users struggled to withdraw funds from Aave after attackers borrowed with stolen rsETH on the platform, spiking a core market’s so-called utilization rate.\nThe funds were plundered from ...</p>\n\n<a href=\"https://decrypt.co//364849/kelp-dao-exploit-aave-liquidity-crunch-6-2-billion-withdrawal-panic\">Source Link</a>\n\n</div>\n","source":"decrypt_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Kelp DAO Exploit Sparks Aave Liquidity Crunch, $6.2 Billion Withdrawal Panic</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nKelp DAO Exploit Sparks Aave Liquidity Crunch, $6.2 Billion Withdrawal Panic\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-19 19:12 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://decrypt.co//364849/kelp-dao-exploit-aave-liquidity-crunch-6-2-billion-withdrawal-panic><strong>Decrypt</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>In brief\nAave users struggled to withdraw funds from Aave after attackers borrowed with stolen rsETH on the platform, spiking a core market’s so-called utilization rate.\nThe funds were plundered from ...</p>\n\n<a href=\"https://decrypt.co//364849/kelp-dao-exploit-aave-liquidity-crunch-6-2-billion-withdrawal-panic\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETHU","symbol_name":"2倍以太币期货ETF-Volatility Shares","start_time":0,"source_url":"https://decrypt.co//364849/kelp-dao-exploit-aave-liquidity-crunch-6-2-billion-withdrawal-panic","article_id":"2628934207","we_media_id":null,"thumbnails":["https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2025/11/aave-decrypt-style-01-gID_7.jpg@webp"],"rights":{"source":"decrypt_highlight","url":"https://decrypt.co//364849/kelp-dao-exploit-aave-liquidity-crunch-6-2-billion-withdrawal-panic","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2628934207","pubTimestamp":1776597140,"columns":[],"sourceInfo":{"source_id":"decrypt_highlight","name":"Decrypt"},"weMediaInfo":null,"summary":"After attackers drained $291 million in crypto from Kelp DAO-linked infrastructure, DeFi users struggled on Aave to withdraw funds.","collect":0,"end_time":0,"defaultTopTitle":"decrypt.co","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETHU":"2倍以太币期货ETF-Volatility Shares","ETHV":"以太坊ETF-VanEck","EZET":"以太坊ETF-Franklin","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","ETHA":"以太坊ETF-iShares","EETH":"以太币期货ETF-ProShares","YETH":"Roundhill Ether Covered Call Strategy ETF","ETHD":"ProShares UltraShort Ether ETF","SETH":"1倍做空以太币期货ETF-Proshares","FETH":"以太币ETF-Fidelity","ETHE":"最大以太坊ETF-Grayscale","ETCO":"Grayscale Ethereum Covered Call ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","BTF":"比特币&以太币期货ETF-CoinShares","ETU":"T-Rex 2X Long Ether Daily Target ETF","QETH":"以太坊ETF-Invesco Galaxy","ETHT":"ProShares Ultra Ether ETF"},"translate_title":"Kelp DAO漏洞引发Aave流动性紧缩，62亿美元提款恐慌","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETHU":0.6,"EZET":0.6,"ETHW":0.6,"ETHI":0.6,"ETU":0.6,"ETH":0.6,"ETCO":0.6,"EETH":0.6,"YETH":0.6,"ETHV":0.6,"ETQ":0.6,"ETHE":0.6,"ETHT":0.6,"SETH":0.6,"FETH":0.6,"QETH":0.6,"ETHD":0.6,"ETHA":0.6,"BTF":0.6},"content_text":"In brief\nAave users struggled to withdraw funds from Aave after attackers borrowed with stolen rsETH on the platform, spiking a core market’s so-called utilization rate.\nThe funds were plundered from a LayerZero-powered bridge, in what onlookers described as DeFi’s biggest exploit so far this year.\nEarly Sunday, DefiLlama’s 0xngmi said Aave had faced $6.2 billion in net withdrawals, while Spark’s monetsupply.eth pointed to “negative secondary effects.”\nLess than a day after attackers drained $291 million in crypto from infrastructure linked to decentralized finance project Kelp DAO, users on Aave, one of DeFi’s most battle-tested protocols, struggled to withdraw funds amid a liquidity crunch.A bridge that typically allows users to move an asset called rsETH from one network to another was exploited on Saturday, prompting Aave to freeze markets tied to the token, which attackers had used to borrow funds from the platform, the lending protocol said in an X post.Meanwhile, Kelp DAO said in an X post that it had “paused rsETH contracts” across Ethereum’s mainnet and several layer-2 scaling networks as it investigates suspicious activity.\nEarlier today we identified suspicious cross-chain activity involving rsETH. We have paused rsETH  contracts across mainnet and several L2s while we investigate.\nWe are working with @LayerZero_Core, @unichain, our auditors and top security experts on RCA. \nWe will keep you…\n— Kelp (@KelpDAO) April 18, 2026The attackers’ activity on Aave caused the so-called utilization rate of a core lending pool to spike to 100%, signaling that users who previously deposited Ethereum and wrapped Ethereum have been left with little to no liquidity to withdraw, Aavescan data showed.An hour before Aave locked down the markets, blockchain security firm PeckShield flagged a transaction showing 116,500 rsETH, worth $291 million at the time, flowing to a fresh wallet.The attackers didn’t abscond with rsETH that had been maliciously released from the bridge. Rather, they used Aave to borrow regular funds, creating “massive bad debt,” Francesco Andreoli, head of developer relations at Consensys and MetaMask, said in an X post. (Disclaimer: Consensys is one of many investors in an editorially independent Decrypt.)Aave’s governance token plunged to $90.13 on Sunday, a 16% decrease over the past day, according to CoinGecko. Ethereum fell 2% to $2,300 over the same period.As users struggled to withdraw from Aave, they began borrowing against their deposits in stablecoins, straining the liquidity further as a sign of “negative secondary effects,” said monetsupply.eth, the pseudonymous head of strategy at DeFi project Spark, in an X post.The Kelp DAO exploit and ensuing fallout on Aave prompted a massive wave of withdrawals from several DeFi protocols, even those that were unaffected, according to 0xngmi, the pseudonymous co-founder of data provider DefiLlama. On a net basis, users had yanked $6.2 billion from Aave alone by early Sunday, they said in an X post.\nThe Aave situation is bad and getting worse. Multiple other pools are hitting 100% utilization, leaving lenders stuck and the protocol at risk of further bad debt.\nLending rates have increased to 10-15%, a notable increase but still not an appropriate reward for the perceived…\n— Quit (@0xQuit) April 19, 2026With contagion appearing to spread, DeFi’s latest exploit provides “a lot of ammo” for critics skeptical of systems that seek to replace traditional financial intermediaries with code, Salman Banei, general counsel at Plume, a network focused on tokenization, said in an X post.Kelp DAO issues rsETH, a liquid staking token that allows users to earn Ethereum staking and EigenLayer restaking rewards. It acts as a tradeable “receipt” for Kelp DAO depositors. The Kelp DAO bridge was built on top of infrastructure designed by LayerZero, a protocol that allows DeFi applications to send messages and transfer assets across blockchains.Stacy Muur, a noted blockchain researcher, said in an X post that the exploit appeared to rely on a single point of failure. She wrote that a “phantom” message used by attackers essentially tricked Kelp DAO’s bridge into releasing rsETH on Ethereum without removing a corresponding amount of tokens from circulation on Ethereum layer-2 Unichain.Nonetheless, some onlookers were eager to find a path forward, including crypto entrepreneur and Tron founder Justin Sun. He attempted to negotiate, arguing that the attackers would ultimately struggle to spend the stolen funds.“How much [do] you want?” he asked them in an X post. “It’s simply not worth it to sacrifice both Aave and Kelp DAO and let them go down over this hack.”Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.Your EmailGet it!Get it!Liquidity Crunch, $6.2 Billion Withdrawal Panic\">","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.0","shortVersion":"4.42.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2628934207","isCrawlerRequest":true}