Aave Faces Liquidity Crunch After $293 Million Kelp DAO Exploit

Aave's ecosystem is under severe pressure after a security breach at Kelp DAO led to a rapid exodus of capital and a significant price correction for the AAVE token. The token fell approximately 20% to $89.5 within a 24-hour window as market participants reacted to the sudden instability. The crisis was triggered when attackers exploited a LayerZero-powered bridge to steal 116,500 rsETH tokens, valued at roughly $293 million. These stolen assets were subsequently used as collateral on Aave v3 to borrow wrapped Ether (wETH), resulting in approximately $195 million in "bad debt" for the protocol. Data from DeFiLlama indicates that Aave's Total Value Locked (TVL) crashed from $26.4 billion to $18.6 billion over the weekend, causing the protocol to lose its position as the largest DeFi platform. Furthermore, lending pools for USDT and USDC have reached 100% utilization, effectively freezing over $5.1 billion in stablecoins until new liquidity arrives or borrows are repaid. Major institutional players, including Abraxas Capital and the MEXC exchange, withdrew hundreds of millions of dollars in response to the risk. In an effort to contain the damage, Aave froze rsETH markets and WETH reserves across several networks, including Ethereum, Arbitrum, Base, Mantle, and Linea. This event serves as the first major stress test of Aave's "Umbrella" security model, implemented in June 2025 to mitigate bad debt. The incident occurs shortly after Aave ended its partnership with risk provider Chaos Labs on April 6 following disagreements over the direction of Aave v4.