DeFi survives $292M KelpDAO exploit and $13B TVL outflow

A reported $292 million exploit against KelpDAO’s rsETH bridge triggered a rapid withdrawal wave across decentralized finance, removing about $13 billion of total value locked (TVL) within 48 hours and prompting emergency freezes on several protocols. The immediate headline impact ignited debates over whether DeFi’s core model is fundamentally broken.

Forensics indicate the attacker minted approximately 116,500 rsETH via a forged cross-chain message on a LayerZero-powered bridge, then deposited the tokens into lending platforms such as Aave as collateral and borrowed real assets against them. Protocol teams moved to pause rsETH markets to stem further damage, while LayerZero and KelpDAO publicly disputed responsibility for the configuration that allowed the exploit.

Market effects were large but nuanced: Aave saw multi-billion-dollar outflows as suppliers withdrew funds, driving its TVL down sharply and contributing a sizable portion of the sector-wide $13B decline. On-chain analysts note that much of the headline TVL loss reflects leverage unwind and reallocation rather than wholesale, irreversible capital destruction, which helps explain why price action in some tokens was less dramatic than TVL figures implied.

The episode highlights structural vulnerabilities in cross-chain infrastructure and the growing systemic risk from widely adopted liquid restaking tokens. Against a backdrop of several large exploits this month, investors and institutions are increasingly scrutinizing bridge security and collateral composition. The incident has renewed calls for better operational controls, multi-signature verification models, and standardized audits for cross-chain messaging layers.

Looking ahead, market participants expect a mix of defensive responses: protocol-level freezes, governance votes on bad-debt resolution, and industry moves toward more robust bridge designs. While some capital may return as short-term panic fades, long-term institutional participation will likely hinge on demonstrable improvements in security and risk governance. Analysts warn that until those changes are realized, DeFi will remain vulnerable to episodic but high-impact liquidity shocks.