In the aftermath of the KelpDAO exploit that drained approximately $300 million in rsETH tokens on April 18, 2026, the decentralized finance (DeFi) ecosystem has witnessed a massive capital exodus, with total value locked (TVL) falling by $14.17 billion over a matter of days. According to data from DefiLlama, the combined TVL of all tracked DeFi protocols dropped from $99.49 billion to $85.32 billion, representing a decline of roughly 14.2%. The incident has exposed the fragility of tightly interlinked smart contract platforms, where a single vulnerability can trigger a cascade of forced liquidations, frozen assets, and rapid withdrawals.
The Attack and Its Immediate Impact
The exploit targeted KelpDAO's rsETH liquid restaking token, allowing the attacker to withdraw around 116,500 rsETH before deploying those assets as collateral across multiple DeFi protocols. As rsETH was widely used as collateral on lending platforms like Aave, the sudden deployment of stolen tokens caused massive bad debt and triggered automated freezes. The contagion quickly spread beyond Aave, affecting protocols that had integrated rsETH or were exposed to Aave's health.
Aave's Collapse and Market Shift
Aave, once the largest DeFi protocol by TVL, suffered a 32.44% drop in its TVL over the past seven days, falling to $17.038 billion. This represents an outflow of approximately $8 billion—more than half of the total capital that left the DeFi sector since April 18. Aave lost its top position to Lido, the leading liquid staking application, which now boasts the highest TVL in the ecosystem. Lido's resilience highlights the relative safety of staking-based protocols during times of market stress.
Broader Protocol-Level Losses
Many other major protocols recorded significant declines. Spark lost approximately 31.6% of its TVL, Curve Finance dropped 11.09%, Pendle fell 12.4%, and Solv Protocol suffered a massive 68.09% decline. EulerDAO and Predict Fun both saw drops above 50%, while others like Merlinswap (-42.4%), Overnight Finance (-40.13%), Sentora (-38.52%), Abracadabra (-33.42%), and Apebond (-33.34%) experienced severe outflows. Even well-established names like Morpho (-9.62%), Ethena (-7.79%), and Sky (formerly MakerDAO, -9.76%) were not immune.
Bright Spots Amid the Storm
While the overall TVL contracted, certain segments actually attracted capital. Real-world asset (RWA) protocols and liquid staking platforms posted gains over the same seven-day period. This divergence suggests that investors are rotating into asset classes perceived as safer or more regulated, even as they flee from leveraged lending markets. The episode underscores the two-speed nature of DeFi — where sectors with tangible income streams and institutional rails can weather confidence shocks better than complex derivative stacks.
Security experts and analysts are calling for enhanced interoperability safeguards and better stress testing of cross-protocol dependencies. As ZachXBT noted in his analysis, the KelpDAO attack exploited a combination of smart contract vulnerabilities and the interconnectedness of rsETH to maximize damage. The $14 billion outflow serves as a stark reminder that in DeFi, trust is a fragile commodity, and a single breach can reshape the competitive landscape overnight.