The decentralized finance (DeFi) sector has been rocked by a major security breach. Kelp DAO, a liquid restaking protocol, suffered a critical vulnerability, resulting in the theft of approximately $293 million. The incident triggered an unprecedented exodus from the Aave lending platform, with $10 billion in total withdrawals — one of the largest single liquidity outflows in recent DeFi history.
The Hack in Detail
According to security analysts, the attack exploited a permission flaw in Kelp DAO's smart contracts. Private hacker groups systematically drained assets from the protocol. Kelp DAO has paused contracts and is collaborating with firms such as Chainalysis and CertiK to trace stolen funds. The protocol's total value locked (TVL) has plummeted by over 60% from its peak.
Market Panic and Contagion Fears
News of the exploit triggered an immediate wave of withdrawals from Aave's stablecoin and ETH pools. Users fear that the Kelp DAO hack could lead to broader “contagion effects,” with attackers targeting similar vulnerabilities in other protocols or bridges. On Polymarket, a prediction contract for “another hack exceeding $100 million before year-end” now trades at 100% certainty, reflecting widespread trader anxiety. The AAVE token fell 0.11% on the day, while Kelp-related tokens dropped over 1.18%.
DeFi Security and Institutional Confidence
The incident once again highlights the security gap in fast-moving DeFi innovation. Kelp DAO had previously earned community trust through its rsETH recovery plan, but this breach has made investors reassess the risk profile of “liquid restaking” narratives. Institutional players may delay capital deployment, and regulators could intensify scrutiny. Whether Aave V4’s native BTC lending proposal (in collaboration with Babylon) can regain market trust after this safety upgrade remains uncertain.
As security firms continue their investigation, the Kelp DAO event serves as a stark reminder: while DeFi pursues capital efficiency, code auditing and incident response capabilities must evolve in parallel. In the coming weeks, the market will closely watch Kelp DAO's compensation plan and Aave's liquidity recovery.