An incident report published by Llamarisk to the Aave forum explains that a bridge exploit targeting KelpDAO's Layerzero V2 rsETH route on Saturday allowed an attacker to extract 116,500 rsETH from Ethereum's OFT adapter without burning any tokens on the source chain.
Aave is currently locked in a tight situation in the KelpDAO hack that Cryptopolitan reported on April 18, where an attacker drained 116,500 rsETH, worth about $292 million, from Kelp's cross-chain bridge. Sources who have been granted anonymity reached out to Cryptopolitan and described Aave as being stuck between bad options and pressure to act.
DefiLlama founder 0xngmi says Aave's TVL isn't being “pumped” by circular borrowing, arguing the platform's metrics already strip out borrowed assets and loops.
Bitcoin (BTC) price dropped 2.5% and BNB Token (BNB) fell 2.3% from Friday.
A KelpDAO exploit triggered a liquidity crisis on Aave, where roughly $300 million in loans were taken out within 24 hours. The attacker deposited 116,500 unbacked rsETH into Aave to withdraw real assets, generating bad debt within the protocol.
LayerZero said that Kelp's DVN setup caused the $290 million exploit, as investors questioned which protocol would step up to cover the shortfall.
AAVE's drop shows collateral failure and liquidity exits reshaping risk across the protocol and wider DeFi markets.
The aftershocks of the Saturday's KelpDAO hack are spreading through stablecoin markets in ways that were not immediately obvious.
DeFi confidence hits a new low as Aave freezes markets following a sophisticated $293M exploit on Kelp DAO's rsETH, linked to North Korea's Lazarus Group.
Aave freezes rsETH as bad debt hits $290 million.
Aave lost more than 6 billion dollars of deposits after the Kelp hack, and this is exactly what the crypto market is sanctioning today. The protocol was not hacked directly.
Aave, one of DeFi's largest lending protocols, is managing a liquidity crisis and an estimated $177 million to $200 million in bad debt after attackers siphoned 116,500 rsETH from Kelp's bridge on Saturday, deposited the tokens on Aave V3 as collateral, and borrowed wrapped ether (WETH) against them.