KelpDAO Exploit Drains $14 Billion From DeFi as Aave TVL Collapses

The KelpDAO exploit has gutted roughly $14.17 billion from DeFi in under a week, and the bleeding is not stopping at one protocol. Since the April 18 incident, total value locked across every chain tracked by DefiLlama has slumped from $99.49 billion to $85.32 billion, a $14.17 billion evaporation that reads like a bank run in slow motion. Aave took the hardest punch. Lido inherited the crown. And a dozen smaller protocols got dragged down with them.

How the KelpDAO Exploit Blew a Hole in DeFi

The trigger was surgical. An attacker drained roughly 116,500 rsETH, worth an estimated $280 million, from the liquid restaking protocol on April 18, 2026. That would have been bad enough as a standalone theft. What made it systemic was what came next.

The stolen rsETH did not disappear into a mixer right away. According to the KelpDAO exploit breakdown, the tokens were deployed as collateral across multiple lending venues before the protocols realized anything was wrong. By the time rsETH price feeds and oracles caught up, the damage was already written into balance sheets as bad debt.

rsETH was not some niche sidecar asset. It was wired into the plumbing. Lending markets accepted it. Yield vaults looped it. Structured products wrapped it. When the value behind the token got questioned, every downstream integration had to freeze, delist, or mark losses. That is how a single-protocol exploit becomes a sector-wide capital flight.

An attacker reportedly exploited a vulnerability in KelpDAO's rsETH liquid restaking token on April 18, 2026, draining an estimated $280 million.

Why Did Aave Lose $8 Billion in a Week?

Short answer: Aave was the biggest single holder of rsETH collateral, so Aave ate the biggest share of the fallout. Over the past seven days, Aave TVL fell 32.44% to $17.038 billion. In raw dollars, that is just over $8 billion gone from one protocol, which works out to 57.73% of the entire $14.17 billion that walked out of DeFi since April 18.

The mechanics are ugly but simple. When rsETH positions on Aave went underwater and could not be liquidated cleanly (because the token itself was frozen or repricing chaotically), the protocol was left with bad debt that cannot be paid back. Depositors who parked ETH, stablecoins, or blue-chip tokens on Aave do not care whose fault the bad debt is. They care that it exists. So they withdrew. Quickly.

There is a symbolic loss here too. Aave had been sitting at the top of the DeFi TVL leaderboard for stretches of the cycle. That title is now gone.

Lido Takes the Crown as Liquid Staking Holds Up

The new leader is Lido, the liquid staking giant that has spent years absorbing stETH deposits. The irony writes itself. A liquid restaking exploit crippled a lending market, and the winner is a liquid staking protocol whose product sits one layer below the thing that blew up.

Lido did not move because anything changed at Lido. It moved because Aave imploded around it. That is what TVL rankings look like during a contagion event. You do not climb. Everyone else falls.

Liquid staking as a category actually posted inflows this week, along with real-world asset (RWA) products and similar cash-flow style vehicles. Capital is not leaving crypto. It is rotating into the corners of DeFi that do not depend on reflexive collateral loops.

The Contagion List: Who Else Got Hit

The damage spread wide. Across the major blue chips, Morpho slid 9.62%, Ethena dropped 7.79%, and Sky (the rebrand of MakerDAO) gave back 9.76% on the week. Spark ran deeper into the red at roughly 31.6%. Curve Finance shed 11.09% and Pendle lost 12.4%.

The mid-cap carnage was worse. Solv Protocol collapsed 68.09% in seven days. EulerDAO fell 51.74%. Predict Fun came in at 51.64%. Merlinswap bled 42.4%, Overnight Finance 40.13%, and Sentora dropped 38.52%.

Further down the list, Abracadabra lost 33.42%, Apebond 33.34%, and Vectis Finance 30.69%. Re7 Labs came off 30.09%, Kumbaya 28.41%, Treehouse 26.46%, and Dolomite 24.7%.

• Solv Protocol: down 68.09%
• EulerDAO: down 51.74%
• Predict Fun: down 51.64%
• Merlinswap: down 42.4%
• Overnight Finance: down 40.13%
• Sentora: down 38.52%
• Spark: down 31.6%
• Aave: down 32.44%

What This Says About How DeFi Is Wired

Here is the part that stings. None of those protocols got hacked. Not one. They lost billions because they were tightly coupled to something that did get hacked. rsETH sat inside vaults, backstopped loans, and fed yield strategies across the sector. Pull one thread and the whole sweater unravels.

Call it efficiency, call it fragility. DeFi has spent two years bragging about composability, the idea that any protocol can plug into any other protocol with a few lines of code. Composability is a beautiful feature right up until the moment a single exploited contract becomes a shared liability for every protocol that integrated it.

The winners this week, liquid staking and RWAs, share a common trait. They are not stacked on top of each other in tight collateral loops. Their yield comes from outside DeFi, from staking rewards or tokenized treasuries, which means a cascade inside DeFi does not automatically eat them alive.

That distinction is going to matter more after this week, not less.

What Happens Next for DeFi TVL?

The honest answer is that nobody knows where the floor is until the bad debt on Aave gets marked, socialized, or written off. Until then, every depositor does the same math. Stay and risk a haircut, or leave and watch from the sidelines. Most are leaving.

Watch three things over the next week. First, whether Aave's governance steps in with a backstop or a debt absorption plan. Second, whether rsETH price recovers enough to let positions liquidate cleanly. Third, whether the liquid staking and RWA inflows keep accelerating, which would confirm that capital is rotating rather than fleeing the sector entirely.

If DeFi's answer to this is more composability, the next exploit will look exactly like this one. The only real fix is isolating collateral so that one bad token does not take down fifteen protocols. The market just gave that lesson in the most expensive way possible.