{"id":23878,"date":"2026-04-22T10:55:42","date_gmt":"2026-04-22T10:55:42","guid":{"rendered":"https:\/\/nft.runfyers.com\/index.php\/2026\/04\/22\/13b-wiped-from-the-defi-market-in-48h-will-aave-bleed-beyond-the-kelp-hack-nft-plazas-13b-wiped-from-the-defi-market-in-48h-will-aave-bleed-beyond-the-kelp-hack\/"},"modified":"2026-04-22T10:55:42","modified_gmt":"2026-04-22T10:55:42","slug":"13b-wiped-from-the-defi-market-in-48h-will-aave-bleed-beyond-the-kelp-hack-nft-plazas-13b-wiped-from-the-defi-market-in-48h-will-aave-bleed-beyond-the-kelp-hack","status":"publish","type":"post","link":"https:\/\/nft.runfyers.com\/index.php\/2026\/04\/22\/13b-wiped-from-the-defi-market-in-48h-will-aave-bleed-beyond-the-kelp-hack-nft-plazas-13b-wiped-from-the-defi-market-in-48h-will-aave-bleed-beyond-the-kelp-hack\/","title":{"rendered":"13B Wiped from the DeFi Market in 48h. Will Aave Bleed Beyond the Kelp Hack? &#8211; NFT Plazas 13B Wiped from the DeFi Market in 48h. Will Aave Bleed Beyond the Kelp Hack?"},"content":{"rendered":"<p><\/p>\n<div>\n<p><span style=\"font-weight: 400;\">In just 48 hours, approximately <\/span><b>$13 billion<\/b><span style=\"font-weight: 400;\"> has been withdrawn from the DeFi market following the <\/span><a href=\"https:\/\/nftplazas.com\/kelp-dao-290m-exploit-nft-wallets-defi-risks\/\" data-wpel-link=\"internal\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">KelpDAO exploit <\/span><\/a><span style=\"font-weight: 400;\">on April 18\u2014an incident now regarded as the largest decentralized finance hack of 2026. Beyond the direct loss of roughly $290 million, the event triggered a massive wave of liquidity withdrawals that quickly spread to lending protocols like <\/span><a href=\"https:\/\/nftplazas.com\/aave-passed-aave-will-win-approved-25m-funding-grant\/\" data-wpel-link=\"internal\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Aave<\/span><\/a><span style=\"font-weight: 400;\">, where a portion of the exploited assets had been used as collateral.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"DeFi_TVL_Drops_13B_in_48_Hours\"\/><b>DeFi TVL Drops $13B in 48 Hours<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><span class=\"ez-toc-section-end\"\/><\/h2>\n<p><span style=\"font-weight: 400;\">Data from DefiLlama shows that total DeFi Total Value Locked (TVL) fell from approximately $99.4 billion to $86.2 billion, representing a <strong>drop of over $13 billion.<\/strong> Specifically, DeFi TVL on Ethereum plummeted from around $56.5 billion on April 18 to nearly $46 billion in just two days, equivalent to a nearly $10 billion decline within this ecosystem alone.<\/span><\/p>\n<div id=\"attachment_96662\" style=\"width: 2940px\" class=\"wp-caption alignnone\"><noscript><\/noscript><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-96662\" class=\"lazyload size-full wp-image-96662\" src=\"https:\/\/nftplazas.com\/wp-content\/uploads\/2026\/04\/TVL-defi-1.jpeg\" alt=\"Total DeFi TVL chart\" width=\"2930\" height=\"824\"\/><\/p>\n<p id=\"caption-attachment-96662\" class=\"wp-caption-text\">Total DeFi TVL chart. Source: DefiLlama<\/p>\n<\/div>\n<p><span style=\"font-weight: 400;\">The TVL decline was primarily driven by liquidity withdrawals and the closing of positions related to restaking and bridges, rather than spot market sell-offs\u2014indicating that capital is exiting higher-risk structures.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The event stemmed from a vulnerability in KelpDAO\u2019s LayerZero-based rsETH bridge path, where a \u201c<\/span><b>1-of-1 DVN<\/b><span style=\"font-weight: 400;\">\u201d validation configuration allowed a fraudulent cross-chain message to be accepted without a corresponding burn transaction. This flaw released 116,500 rsETH from the Ethereum-side adapter, creating a surplus of unbacked assets on the associated chains.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Kelp_Exploit_Triggers_Liquidity_Unwind\"\/><b>Kelp Exploit Triggers Liquidity Unwind<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><span class=\"ez-toc-section-end\"\/><\/h2>\n<p><span style=\"font-weight: 400;\">The direct damage of approximately <\/span><b>$290 million<\/b><span style=\"font-weight: 400;\"> from the exploit accounts for only a small fraction of the over $13 billion TVL drop across the market. The majority of the volatility stemmed from the subsequent position unwinding process.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">rsETH is widely used as collateral to borrow ETH or stablecoins, which are then further deployed into other strategies. When this asset encountered the exploit, these chains of related positions were forced to close to mitigate risk.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This process led to liquidity withdrawals from lending protocols, reduced leverage, and defensive portfolio restructuring. Consequently, TVL dropped rapidly, even before forced liquidations occurred on a large scale.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Data from Coinglass shows that total liquidations in 24 hours reached approximately <\/span><b>$254 million<\/b><span style=\"font-weight: 400;\">; while volatility increased, it remained significantly lower than in previous panic liquidation events.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This suggests that most of the capital leaving DeFi during this period came from proactive deleveraging rather than forced liquidations.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Aave_Absorbs_Most_of_the_Market_Shock\"\/><b>Aave Absorbs Most of the Market Shock<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><span class=\"ez-toc-section-end\"\/><\/h2>\n<p><span style=\"font-weight: 400;\">Aave became the focal point as a significant portion of the exploited assets was funneled into this lending system.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">According to a <a href=\"https:\/\/governance.aave.com\/t\/rseth-incident-report-april-20-2026\/24580\" data-wpel-link=\"external\" target=\"_blank\" rel=\"nofollow external noopener noreferrer\">report published by LlamaRisk<\/a> on April 20, out of the total <\/span><b>116,500 rsETH <\/b><span style=\"font-weight: 400;\">withdrawn, approximately 89,567 rsETH (~$221.39 million) was deposited into Aave as collateral. From there, the attacker borrowed roughly 82,650 WETH (~$190.86 million) along with a small amount of wstETH, with positions maintaining health factors around 1.01\u20131.03\u2014very close to the liquidation threshold.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In response to this risk, Aave quickly froze all <\/span><b>rsETH<\/b><span style=\"font-weight: 400;\"> and <\/span><b>wrsETH<\/b><span style=\"font-weight: 400;\"> reserves and reduced the LTV (Loan-to-Value) ratio to 0 to prevent new positions from being opened. Several related WETH markets were also frozen, while interest rate models were adjusted to alleviate liquidity pressure within the system.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The protocol also confirmed that the system itself was not exploited and that the incident originated entirely from external assets.<\/span><\/p>\n<div id=\"attachment_96663\" style=\"width: 2570px\" class=\"wp-caption alignnone\"><noscript><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-96663\" class=\"size-full wp-image-96663\" src=\"https:\/\/nftplazas.com\/wp-content\/uploads\/2026\/04\/aave_tvl.jpg\" alt=\"Aave TVL chart\" width=\"2560\" height=\"1440\"\/><\/noscript><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-96663\" class=\"lazyload size-full wp-image-96663\" src=\"https:\/\/nftplazas.com\/wp-content\/uploads\/2026\/04\/aave_tvl.jpg\" alt=\"Aave TVL chart\" width=\"2560\" height=\"1440\"\/><\/p>\n<p id=\"caption-attachment-96663\" class=\"wp-caption-text\">Aave TVL chart. Source: DefiLlama<\/p>\n<\/div>\n<p><span style=\"font-weight: 400;\">Aave\u2019s TVL dropped sharply following the incident, from approximately $26.3 billion to $20 billion in a short period, before further retreating to around <\/span><b>$16.4 billion<\/b><span style=\"font-weight: 400;\">. Despite not being the site of the exploit, Aave became the absorption point for much of the market pressure due to its direct exposure to rsETH.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Bad_Debt_Risk_Ranges_120M%E2%80%93230M\"\/><b>Bad Debt Risk Ranges $120M\u2013$230M<\/b><span style=\"font-weight: 400;\">\u00a0<\/span><span class=\"ez-toc-section-end\"\/><\/h2>\n<p><span style=\"font-weight: 400;\">The potential bad debt on Aave remains difficult to determine precisely, as it depends on how the unbacked rsETH is handled and the loss allocation mechanism.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">According to scenarios modeled in the LlamaRisk report, total bad debt on Aave could range from approximately <\/span><b>$123.7 million to $230.1 million<\/b><span style=\"font-weight: 400;\">, depending on whether losses are distributed evenly or concentrated on rsETH assets on Layer 2s.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The impact level could be significantly higher on chains such as <\/span><b>Mantle<\/b><span style=\"font-weight: 400;\">, <\/span><b>Arbitrum<\/b><span style=\"font-weight: 400;\">, and <\/span><b>Base<\/b><span style=\"font-weight: 400;\">, where liquidity is lower, and position buffers are more limited.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Market_at_a_Short-Term_Inflection_Point\"\/><b>Market at a Short-Term Inflection Point\u00a0<\/b><span class=\"ez-toc-section-end\"\/><\/h2>\n<p><span style=\"font-weight: 400;\">Following the initial shock, positions related to <\/span><b>rsETH<\/b><span style=\"font-weight: 400;\"> have largely been isolated on Aave and have not yet recorded direct impacts at the protocol level.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">However, capital continues to flow out of Aave, which holds the majority of the exposure related to the exploited rsETH. If the value of this asset continues to decline or if loss allocation creates further pressure on <\/span><b>Layer 2<\/b><span style=\"font-weight: 400;\"> markets, the impact could spread to collateral values and liquidity across the lending sector.<\/span><\/p>\n<\/div>\n<p><a href=\"https:\/\/nftplazas.com\/13b-wiped-defi-market-aave-kelp-hack\/\" target=\"_blank\" rel=\"noopener\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In just 48 hours, approximately $13 billion has been withdrawn from the DeFi market following the KelpDAO exploit on April 18\u2014an incident now regarded as the largest decentralized finance hack of 2026. Beyond the direct loss of roughly $290 million, the event triggered a massive wave of liquidity withdrawals that quickly spread to lending protocols [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":23879,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[16],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/nftplazas.com\/wp-content\/uploads\/2026\/04\/2104.jpg","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/posts\/23878"}],"collection":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/comments?post=23878"}],"version-history":[{"count":0,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/posts\/23878\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/media\/23879"}],"wp:attachment":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/media?parent=23878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/categories?post=23878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/tags?post=23878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}