Aave Faces $15 Billion Liquidity Exodus Following Kelp DAO Exploit

Aave, the largest decentralized lending protocol, has experienced a sharp decline in its supplied balance, with approximately $15 billion in deposits withdrawn in a matter of days. Total value supplied plummeted from $45.8 billion on Saturday to $30.8 billion by Wednesday, reflecting a rapid flight of capital amid growing uncertainty. The exodus was triggered by a security breach at Kelp DAO, where an attacker drained roughly 116,500 restaked Ether (rsETH), valued at approximately $293 million, via a LayerZero-powered bridge. The exploiter subsequently utilized a portion of these stolen assets to borrow against the Aave protocol, creating significant bad debt. Aave's internal incident report indicates that 89,567 rsETH were deposited, leaving a potential shortfall between $123 million and $230 million, depending on how losses are allocated. This bad debt caused the v3 Wrapped Ether (WETH) market to hit 100% utilization, temporarily halting immediate withdrawals for some users. While Aave has unfrozen WETH reserves on the Ethereum Core V3 market, reserves across Ethereum Prime, Arbitrum, Base, Mantle, and Linea remain frozen. The incident has highlighted the systemic vulnerabilities of interconnected DeFi layers, where risks in bridging and restaking can quickly cascade into lending markets. Market data suggests a rotation of capital, with SparkLend's total value locked increasing by $1.3 billion as users seek alternatives. Aave's risk management is currently evaluating two scenarios for addressing the shortfall: socializing losses across all rsETH holders or shifting the entire burden to layer-2 networks.