DeFi Credit Risk Repriced Following Major Aave Exploit

The perceived safety of decentralized finance (DeFi) lending was shattered this weekend as a structural exploit led to a rapid repricing of credit risk. Aave, long considered the industry's gold standard, saw stablecoin deposit yields surge from under 6% to 13.4% in just 48 hours, ending a period where DeFi rates were inexplicably lower than U.S. Treasury yields. The volatility was triggered by an attacker exploiting Kelp DAO’s LayerZero-powered cross-chain bridge to mint approximately 116,500 unbacked rsETH tokens, valued at roughly $292 million. These synthetic assets were then used as collateral on Aave to borrow between $190 million and $230 million in real assets. Aave reported that the protocol functioned as designed, but the shortfall was structural rather than technical. The aftermath was immediate and severe. Aave experienced net outflows of $6 billion to $10 billion, driving utilization rates for WETH, USDT, and USDC pools to 100%. This liquidity crunch forced some users to borrow against their own locked deposits at a loss just to access cash. The contagion spread to other platforms, with Morpho’s USDC vault seeing APRs jump from 4.4% to 10.81%. In total, the TVL across the top 20 DeFi chains plummeted by more than $13 billion. The event highlights a critical vulnerability in the DeFi architecture: the absence of bankruptcy laws or recovery processes. Unlike regulated finance, where courts can claw back assets, DeFi operates on a 'first-out' basis, leaving late withdrawers to absorb disproportionate losses without legal recourse.