DeFi Losses Top $600 Million Amid Kelp DAO Exploit and TVL Decline
Key Takeaways:
- Total DeFi losses have skyrocketed to approximately $1 billion recently, with $600M+ linked directly to the Kelp DAO exploit.
- The exploit involved minting 116,500 unbacked rsETH by manipulating LayerZero’s verifier, without breaching smart contracts.
- A $13 billion exodus led to DeFi’s tvl-7532">total value locked (TVL) hitting a one-year low soon after the event.
- Aave, SparkLend, and Fluid froze rsETH markets, with Aave’s TVL dropping by about $8.4 billion.
- North Korea’s Lazarus Group, notably its TraderTraitor subunit, is suspected to be behind the attack, yet formal confirmation is pending.
WEEX Crypto News, 2026-04-22 12:04:54
Kelp DAO Exploit and DeFi’s Structural Vulnerability
The Kelp DAO incident on April 18, 2026, laid bare vulnerabilities in DeFi infrastructure, resulting in over $600 million in losses. These losses stemmed from a targeted attack that minted 116,500 unbacked rsETH due to a compromised LayerZero verifier node. Security firm Halborn had previously highlighted this single-point architectural weakness, forewarning what has now become a cautionary tale of structural oversight.
How It Happened
In a high-stakes maneuver, the Lazarus Group—a subdivision dubbed TraderTraitor—leveraged compromised RPC nodes to carry out a DDoS attack, thereby executing a fake message that conjured the uncollateralized rsETH. The fact that no novel smart contract vulnerabilities were exploited underscores the issue: known misconfigurations were ignored.
[Place Image: Demonstration of Kelp DAO exploit via LayerZero verifier]
This flawed setup, documented and previously flagged, turned internal security oversights into a significant exploit. Attackers rapidly converted rsETH into ETH and Arbitrum, using Tornado Cash for further transactions to obscure origin trails.
Unprecedented Capital Flight and TVL Plunge
DeFi’s TVL had been dwindling due to macroeconomic pressures. However, the Kelp DAO exploit rapidly escalated the situation, triggering a $13 billion capital flight within just 48 hours, according to DefiLlama. This bleached market liquidity, blindsiding even those protocols not directly linked to rsETH like Compound, which still faced withdrawal spasms.
Aave, profoundly affected, witnessed its TVL drop from $26.4 billion to roughly $18 billion—a dramatic $8.45 billion fall, mainly as a protective measure against crystallizing bad debts tied to faulty rsETH collateral.
[Place Image: Chart showing Aave’s TVL decline]
Future Scenarios
Two paths emerge from here. If Kelp DAO issues a credible forensic report along with a restitution strategy, and if Aave manages to rectify its rsETH exposure, the contagion could stabilize. On the contrary, further delays in LayerZero’s security overhaul could trigger another wave of withdrawals, forcing yield hunters to pivot to more secure yet interconnected ecosystems.
On the Frontline: Security and Recovery Measures
LayerZero’s naming of the Lazarus Group provides some directional insight into responsibility, yet formal affirmation is essential. Meanwhile, the DeFi community anxiously awaits comprehensive reports from both Kelp DAO and Aave. These reports will be pivotal in gauging immediate recovery prospects and long-term resilience.
The vulnerability exposed—relying on a 1-of-1 verifier—is far from unique to Kelp. Other protocols running similar frameworks must heed these warnings. An industry-wide reassessment of architectural robustness is inevitable if future misplaced trust is to be avoided.
Ripple Effects and Governance Token Dynamics
Governance tokens feel the ripple effects too. AAVE, for instance, dipped over 20% post-exploit, primarily driven by users’ de-risking maneuvers reflecting a shaky confidence in asset-backed lending.
[Place Image: Governance token valuation trends post-exploit]
This uncharted terrain poses questions about possible protocol adaptations. Will platforms adopt multi-layered verifier structures, or are cross-chain networks fundamentally vulnerable? As stakeholders dwell on these questions, they remain wary of any incidents that might precipitate a similar exodus.
FAQ
What triggered the Kelp DAO exploit?
The exploit was triggered by a vulnerable single-point verifier node under LayerZero, compromised through RPC node hijacking, resulting in unbacked rsETH minting.
How much of the rsETH was uncollateralized during the exploit?
116,500 rsETH was minted without collateral through the exploit, roughly 18% of the circulating supply.
What was the extent of DeFi’s TVL reduction post-exploit?
DeFi TVL suffered a $13 billion reduction within 48 hours of the exploit, hitting a one-year low.
Which protocols took major hits following the exploit?
Aave, SparkLend, and Fluid froze their rsETH markets, with Aave’s TVL falling by $8.45 billion.
Who is suspected to have orchestrated the Kelp DAO attack?
The Lazarus Group, specifically its TraderTraitor subunit from North Korea, is suspected, but formal confirmation is awaited.
You may also like

Michael Saylor: Winter is Over – Is He Right? 5 Key Data Points (2026)
Michael Saylor tweeted yesterday “Winter‘s Over.” It is short. It is bold. And it has the crypto world talking.
But is he right? Or is this just another CEO pumping his bags?
Let us look at the data. Let us be neutral. Let us see if the ice has really melted.

WEEX Bubbles App Now Live Visualizes the Crypto Market at a Glance
WEEX Bubbles is a standalone app designed to help users quickly understand complex crypto market movements through an intuitive bubble visualization.

Polygon co-founder Sandeep: Writing after the chain bridge chain explosion

Major Upgrade on Web: 10+ Advanced Chart Styles for Deeper Market Insights
To deliver more powerful and professional analysis tools, WEEX has rolled out a major upgrade to its web trading charts—now supporting up to 14 advanced chart styles.

Morning Report | Aethir secures a $260 million enterprise contract with Axe Compute; New Fire Technology acquires Avenir Group's trading team; Polymarket's trading volume surpassed by Kalshi

Why a Million-Follower Crypto KOL Chooses WEEX VIP?
Discover why top crypto KOL Carl Moon partnered with WEEX. Explore the WEEX VIP ecosystem, 1,000 BTC protection fund, and exclusive rewards for serious traders.

CoinEx Founder: The Crypto Endgame in My Eyes

Spark Coin (SPK): Explodes 73% as Aave Bleeds $15B, A Good Investment Now?
Spark coin (SPK) surged 73% as $15 billion fled Aave after the KelpDAO hack. This article explains what Spark is, why it’s pumping, and whether it is a good investment right now.

As Aave's building collapses, Spark's high-rise is rising

RootData: Q1 2026 Cryptocurrency Exchange Transparency Research Report

What Is Memecoin Trading? A Beginner's Guide to How It Works, the Risks, and 2026's Hottest Tokens
Memecoins surged 30%+ at the start of 2026 while Bitcoin was flat. RAVE spiked 4,500% then crashed 90% in days. MAGA jumped 350% overnight. This guide explains exactly how memecoin trading works — and how to not blow up your account doing it.

Trump Extends Ceasefire: Bitcoin Hits $79K — What Crypto Traders Need to Know Right Now
Bitcoin surged past $79,000 after Trump extended the ceasefire indefinitely. We break down exactly what happened, how every major crypto reacted, and what traders should watch next — including the one level that could unlock an $85,000 BTC rally.

CHIP Crypto Price Prediction 2026: Can USD.AI's GPU Lending Token Reach $1?
CHIP's 24-hour trading volume hit $1.87 billion on a $236 million market cap — an 8x ratio that almost never happens on legitimate tokens. We explain what's driving it, what USD.AI actually does for GPU tokenization, and whether CHIP belongs in your AI crypto portfolio.

RootData: Q1 2026 Web3 Industry Investment Research Report

USDC is the only AI token

The voice of a senior Polymarket user: In fact, we have already been surpassed by our competitors

Transcript of Dr. Han, founder of Gate, speaking at the University of Hong Kong: Breaking the Matthew Effect and Winning in Asymmetric Competition

Who will replace AAVE as the new king?
Michael Saylor: Winter is Over – Is He Right? 5 Key Data Points (2026)
Michael Saylor tweeted yesterday “Winter‘s Over.” It is short. It is bold. And it has the crypto world talking.
But is he right? Or is this just another CEO pumping his bags?
Let us look at the data. Let us be neutral. Let us see if the ice has really melted.
WEEX Bubbles App Now Live Visualizes the Crypto Market at a Glance
WEEX Bubbles is a standalone app designed to help users quickly understand complex crypto market movements through an intuitive bubble visualization.
Polygon co-founder Sandeep: Writing after the chain bridge chain explosion
Major Upgrade on Web: 10+ Advanced Chart Styles for Deeper Market Insights
To deliver more powerful and professional analysis tools, WEEX has rolled out a major upgrade to its web trading charts—now supporting up to 14 advanced chart styles.
Morning Report | Aethir secures a $260 million enterprise contract with Axe Compute; New Fire Technology acquires Avenir Group's trading team; Polymarket's trading volume surpassed by Kalshi
Why a Million-Follower Crypto KOL Chooses WEEX VIP?
Discover why top crypto KOL Carl Moon partnered with WEEX. Explore the WEEX VIP ecosystem, 1,000 BTC protection fund, and exclusive rewards for serious traders.
