The fallout from the KelpDAO exploit has spread far beyond a single protocol, triggering a broad retreat across decentralized finance and exposing how tightly connected major DeFi systems have become. According to the source material, the incident began on April 18, 2026, when an attacker exploited a vulnerability tied to KelpDAO’s rsETH liquid restaking token, draining roughly 116,500 rsETH and causing losses estimated at nearly $300 million.
The impact escalated because the affected assets were not isolated inside one application. Instead, they had been deployed as collateral across multiple DeFi protocols, especially in lending markets. Once the exploit occurred, that collateral structure helped transmit stress across the sector, leading to freezes, liquidity strain, and the buildup of bad debt. The source notes that much of this bad debt became concentrated on Aave, one of the largest lending platforms in the ecosystem.
DeFi TVL Falls by More Than $14 Billion
Data cited from Defillama shows the total value locked across DeFi protocols dropped from $99.49 billion to $85.32 billion after the exploit, a contraction of approximately $14.17 billion. That scale of decline highlights how quickly capital can exit DeFi when confidence in collateral quality and protocol interdependence comes into question.
The source frames the selloff as a cascading wave of withdrawals rather than a contained reaction. Because rsETH had been used extensively in interconnected DeFi markets, the exploit did not remain limited to KelpDAO. Instead, it created knock-on effects throughout the lending and collateral stack, reinforcing concerns about contagion in systems where protocols depend on the same assets and leverage assumptions.
This episode underscores a familiar but increasingly important issue in decentralized finance: composability can drive efficiency and growth during favorable conditions, but it can also amplify localized failures. When a widely used asset suffers a security breach or pricing shock, protocols linked through collateral, leverage, and liquidity routing may all come under pressure at once.
Aave Suffers the Largest Visible Damage
Among the major protocols tracked in the report, Aave appears to have absorbed the largest share of the shock. Over the last seven days, Aave’s TVL fell 32.44% to $17.038 billion. In absolute terms, the platform lost just over $8 billion, accounting for roughly 57.73% of the total $14.17 billion that left the DeFi sector since April 18, according to the source material.
The decline was severe enough to alter the ranking of the industry’s largest protocols by TVL. Aave, which had previously held the top spot, was overtaken by Lido, the liquid staking giant. That change is notable not only because it reflects capital flight from lending markets, but also because it suggests users may be reassessing where they see relative safety inside the broader onchain economy.
The source directly links Aave’s stress to the use of rsETH as collateral across lending markets. Once confidence in that collateral was undermined, bad debt concerns and liquidity constraints intensified. In DeFi, such dynamics can quickly push users to withdraw funds preemptively, especially from venues exposed to rehypothecated or closely connected assets.
Outflows Spread Across Major Protocols
The damage was not limited to Aave. Several other large DeFi applications also posted notable TVL declines over the same seven-day period. Morpho fell 9.62%, Ethena dropped 7.79%, and Sky—formerly MakerDAO—declined 9.76%. These moves suggest that market participants responded broadly rather than targeting only the most directly affected venue.
Other protocols saw even sharper contractions. Spark posted a drop of about 31.6%, while Curve Finance lost 11.09% and Pendle fell 12.4%. The pattern indicates that users were pulling liquidity from both lending and trading-related platforms, likely as part of a generalized move to reduce exposure amid uncertainty.
Further down the list, the source records especially steep weekly declines from several protocols: Solv Protocol fell 68.09%, EulerDAO dropped 51.74%, and Predict Fun slipped 51.64%. Additional losses included Merlinswap at 42.4%, Overnight Finance at 40.13%, and Sentora at 38.52%.
The report also lists a broad range of protocols suffering declines around or above 30%, including Abracadabra at 33.42%, Apebond at 33.34%, and Vectis Finance at 30.69%. Elsewhere, Re7 Labs fell 30.09%, followed by Kumbaya at 28.41%, Treehouse at 26.46%, and Dolomite at 24.7%.
Why the KelpDAO Incident Matters Systemically
The KelpDAO exploit stands out because it demonstrates how a vulnerability in one tokenized staking product can reverberate across lending markets and beyond. The source explains that the attacker exploited a weakness in KelpDAO’s rsETH structure, and once the assets were drained and used within DeFi collateral pathways, the resulting shock triggered freezes and pressure on liquidity across interconnected applications.
In practical terms, this means DeFi’s modular design can become a transmission mechanism for stress. A protocol may appear secure on its own, yet still face significant exposure if it accepts collateral issued elsewhere or depends on assets whose value and redemption assumptions break down under attack. The buildup of bad debt on Aave, as referenced in the source, is an example of how quickly such second-order effects can surface.
The event also raises questions about risk concentration in liquid restaking and collateralized lending ecosystems. Even when users seek yield through differentiated strategies, many positions can still be linked by the same base assets or wrappers. Once one of those instruments fails, confidence may deteriorate across the stack, leading to synchronized withdrawals.
Not All DeFi Segments Are Declining
Despite the heavy losses across lending and several major protocols, the source notes that some segments of DeFi continued to post gains over the past seven days. In particular, liquid staking, real-world asset (RWA) products, and related vehicles recorded increases. That divergence suggests capital did not exit the ecosystem uniformly; instead, some of it appears to have rotated toward segments perceived as more resilient or structurally distinct from the immediate source of the shock.
The rise of Lido to the top of the TVL rankings fits this broader trend. While the report does not quantify Lido’s weekly gain, its new position at the top of the table reflects how users may be favoring platforms with different risk profiles as lending markets absorb the aftershocks of the exploit. Likewise, continued inflows into RWA products suggest demand remains for onchain exposure tied to assets or structures seen as less directly affected by the rsETH incident.
That said, the overall picture remains one of system-wide stress. A gain in selected sub-sectors does not offset the scale of the withdrawals recorded across the broader market. With DeFi TVL down by more than $14 billion, the exploit has become a stark reminder that confidence can evaporate quickly when the market questions the integrity of collateral and the depth of protocol-level risk management.
A New Stress Test for DeFi Risk Management
Ultimately, the KelpDAO exploit is more than a story about one vulnerability or one bad week for TVL. It is a test of how DeFi handles interconnected risk. The source describes a market where a single exploited asset propagated damage through collateral channels, strained lending protocols, and contributed to a large-scale withdrawal wave in a matter of days.
For builders, the event may renew focus on collateral standards, oracle assumptions, liquidation mechanics, and protocol exposure limits. For users, it reinforces the importance of understanding not only the protocol they deposit into, but also the assets and dependencies that sit beneath it. And for the market as a whole, the incident illustrates the double-edged nature of composability: the same architecture that enables rapid innovation can also accelerate contagion when one component breaks.
As of the data cited in the source, the immediate result is clear: nearly $300 million was lost in the exploit, DeFi TVL fell by $14.17 billion, and Aave alone saw more than $8 billion leave the platform in the aftermath. Whether this proves to be a temporary shock or a longer reset for lending-market risk will depend on how quickly confidence can be restored across the ecosystem.